Download

Skill UI

Browse and discover 11317+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search CI/CD Security , found 72 results

Default Newest Most Downloaded

Secure Anima and Figma Tokens

anima-security-basics

jeremylongshore/claude-code-plugins-plus-skills

This guide outlines critical security best practices for design-to-code pipelines using Anima and Figma. It covers securing API credentials by restricting token scopes (e.g., read-only access for Figma), enforcing server-side execution for SDKs, and implementing robust secret management using cloud services like GCP Secret Manager. This minimizes the risk of credential leakage in CI/CD environments.

Canva API Policy Guardrails Enforcement

canva-policy-guardrails

jeremylongshore/claude-code-plugins-plus-skills

Implements automated policy enforcement and guardrails for Canva Connect API integrations. This system enforces best practices such as preventing hardcoded credentials, ensuring proper rate limit handling (429 responses), and validating robust OAuth configurations. It is essential for maintaining high code quality and security in CI/CD pipelines and pre-commit hooks.

Figma API Policy & Guardrails

figma-policy-guardrails

jeremylongshore/claude-code-plugins-plus-skills

Automated guardrails for enforcing security policies and coding standards across all Figma API integrations. This tool is essential for CI/CD pipelines, helping to prevent credential leaks (PATs), validate API scopes, enforce request best practices, and ensure stable, secure connectivity with Figma.

HubSpot Integration Security Guardrails

hubspot-policy-guardrails

jeremylongshore/claude-code-plugins-plus-skills

A comprehensive guide for implementing robust policy enforcement and security guardrails in HubSpot integrations. This methodology covers secret scanning within CI/CD pipelines to prevent token leaks, utilizes ESLint rules for enforcing modern authentication practices, and leverages TypeScript for compile-time and runtime checks. Use this when setting up secure, scalable, and compliant codebases for HubSpot APIs.

Persona CI/CD Integration Testing

persona-ci-integration

jeremylongshore/claude-code-plugins-plus-skills

This skill provides a structured guide for setting up CI/CD pipelines to test Persona identity verification integrations. It demonstrates how to use sandbox API credentials, simulate webhooks, and run comprehensive integration tests. It is essential for developers ensuring the reliability and security of KYC/identity services before deployment.

Salesforce Policy and Security Guardrails

salesforce-policy-guardrails

jeremylongshore/claude-code-plugins-plus-skills

This guide implements comprehensive policy guardrails for robust Salesforce integrations. It provides solutions for preventing SOQL injection vulnerabilities, detecting hardcoded credentials, throttling API usage at runtime, and enforcing code quality via custom ESLint rules and CI/CD checks. Use this when building secure, scalable, and compliant Salesforce applications.

Static Site Deployment with VSCode SFTP

vscode-sftp-config

libukai/awesome-agent-skills

A comprehensive guide and workflow for deploying static websites (e.g., Vue, React, Angular, Hugo, Jekyll) from a local environment to a production server using VSCode SFTP. This skill covers setting up secure SFTP connections, generating production-ready Nginx configurations (including security headers, caching, and HTTPS redirects), and providing a complete deployment checklist for smooth CI/CD-like workflows.

Advanced Content Security Policy Bypass Techniques

csp-bypass-advanced

yaklang/hack-skills

This comprehensive guide details advanced techniques for circumventing Content Security Policies (CSP). It covers exploiting weaknesses in critical directives (e.g., base-uri, object-src), abusing nonces, leveraging trusted CDN endpoints, and executing code despite strict controls like script-src 'self' or 'strict-dynamic'. Essential knowledge for deep security auditing and penetration testing.

Advanced Web Cache Deception and Poisoning

web-cache-deception

yaklang/hack-skills

A comprehensive playbook detailing expert-level techniques for exploiting web cache vulnerabilities. Covers both Web Cache Deception (stealing authenticated user data) and Web Cache Poisoning (injecting malicious content). Techniques include path confusion, unkeyed header manipulation (X-Forwarded-Host), and exploiting CDN/reverse proxy caching logic. Essential reading for penetration testers and security researchers.

Quarkus Application Verification Pipeline

quarkus-verification

affaan-m/everything-claude-code

A comprehensive CI/CD pipeline for Quarkus applications, designed to verify code quality and deployment readiness. It covers all phases: build, static code analysis (SonarQube, Checkstyle), rigorous functional testing (Unit, Integration, API), security scanning (OWASP, dependency checks), native image compatibility testing, performance load testing (K6), and container image validation (Trivy, Grype).

Terraform IaC Architecture and Best Practices

terraform-skill

agentscope-ai/QwenPaw

A comprehensive guide for designing and implementing robust Infrastructure as Code (IaC) using Terraform or OpenTofu. Covers module hierarchy design, best practices for naming conventions, structuring multi-environment pipelines, advanced testing strategies (native tests, Terratest, static analysis), and integrating security scanning (trivy, checkov) into CI/CD workflows.

CI/CD and Deployment Automation

sickn33/antigravity-awesome-skills

Dep handles the entire journey from local code to production deployment. This skill automates containerization using Docker and docker-compose, establishes robust CI/CD pipelines (linting, testing, security scanning, deployment), manages environment variables and secrets, and generates Infrastructure as Code (Terraform/Pulumi) configurations. It ensures observability and provides rollback procedures.

Prev 1 2 3 456 Next

Language