devsecops-lookup
Installation
SKILL.md
DevSecOps Guideline Lookup
Reference for OWASP DevSecOps Guideline phases, tools, and security checks.
Pipeline Phases
| Phase | Activity | Key Tools |
|---|---|---|
| Develop | Pre-commit checks, Secret detection | Gitleaks, TruffleHog, pre-commit |
| Build | SAST, SCA, Container, IaC | Semgrep, Trivy, Hadolint, tfsec |
| Test | DAST, API Security, IAST | OWASP ZAP, Nuclei, Postman |
| Deploy | Security Gates, Config validation | Policy-as-code, Admission controllers |
| Operate | Monitoring, Vulnerability management | CNAPP, SIEM, Pentesting |