secure-pipeline
Installation
SKILL.md
Secure CI/CD Pipeline
Security Requirement
CI/CD pipelines for AI software MUST implement security scanning to catch vulnerabilities before they reach production.
Required Scanning Types
SAST (Static Application Security Testing)
Analyze source code for security vulnerabilities without executing it:
| What SAST Catches | Examples |
|---|---|
| Injection vulnerabilities | SQL injection, command injection, XSS |
| Hardcoded secrets | API keys, passwords in source code |
| Insecure configurations | Weak crypto, disabled TLS verification |
| Code quality issues | Buffer overflows, null dereferences |