Skill UI

Guides security teams through identifying and fixing Amazon S3 buckets that expose data, covering detection, account- and bucket-level block public access, policy/ACL audits, encryption, logging, and automated AWS Config+Lambda remediation.

Integrates Aqua Security’s Trivy into CI/CD pipelines to scan Docker images, IaC manifests, and misconfigurations; includes GitHub Actions/GitLab CI workflows, severity-based gates, ignore policies, and cache handling for efficient vulnerability detection.

Trivy scans Docker images for OS, language, configuration, secret, and license vulnerabilities, emits SARIF/CycloneDX/SPDX/JSON reports, and enforces policies via .trivyignore while integrating into GitHub Actions or GitLab CI pipelines to keep containers secure.

Guides penetration testers through identifying CORS misconfigurations that allow unauthorized cross-domain requests, validating Origin handling, invoking preflight checks, and building PoCs to expose credential theft risks during API audits.