devsecops-pipeline

What this skill does

Assesses the current CI/CD pipeline security maturity across 8 stages (Plan → Code → Build → Test → Release → Deploy → Operate → Monitor), identifies gaps, and produces ready-to-use GitHub Actions workflow configurations, security gate policy definitions, and a phased implementation roadmap.

When to use

• When adding security controls to an existing CI/CD pipeline
• When setting up a new pipeline that needs built-in security from the start
• When preparing for a DevSecOps maturity assessment or audit
• When standardizing security tooling across multiple teams or repositories

Prerequisites

Tools are referenced per stage; install only what applies to your stack: