Skill UI

Configures a robust CI/CD pipeline for Apollo.io integrations using GitHub Actions. It implements multi-stage testing, including unit tests (using MSW mocks for zero API calls), live integration tests (gated to main branch), and secret scanning. Ensures reliable and safe deployment practices for SaaS applications.

This skill performs deep, line-by-line scanning of an entire codebase to understand its architecture, patterns, and dependencies. It systematically identifies critical issues across security vulnerabilities (SQL injection, secrets), performance bottlenecks (N+1 queries, caching), architectural flaws, and code quality gaps. It then automatically refactors and fixes all identified issues, transforming the code into professional, production-grade, enterprise-level quality.

Scans your codebase with pattern matching and entropy analysis to detect exposed secrets like API keys, passwords, and private keys, then generates remediation reports so you can fix vulnerabilities before committing or deploying code.

Static Application Security Testing plugin orchestrates Bandit, Semgrep, ESLint Security, and other analyzers to detect SQLi, XSS, CSRF, secrets, and framework-specific risks during code reviews or CI, supporting OWASP/PCI-DSS compliance.

Implements a full GitLab CI DevSecOps pipeline that plugs SAST, DAST, container, dependency, and secret scanning plus license compliance into CI/CD workflows so teams detect vulnerabilities early and gate artifacts before staging/production deployments.

Deploy Aqua Security's Trivy scanner within CI/CD pipelines, registries, and Kubernetes clusters to scan container images, repos, IaC, and workloads for vulnerabilities, misconfigurations, secrets, and SBOM/license issues.

Guides integrating Semgrep, Trivy, OWASP ZAP, and Gitleaks into CI/CD pipelines so teams can spot secrets and vulnerabilities early, satisfy compliance, and gate deployments with automated DevSecOps scans.

Implements GitHub Advanced Security with CodeQL to provide automated static analysis, secret detection, dependency review, and push protection across repositories, enabling enterprise-scale vulnerability monitoring and compliance-aligned controls.

Define a Gitleaks-driven secret scanning workflow that spans repo baseline scans, pre-commit hooks, GitHub Actions CI/CD runs, custom detection rules, and remediation steps to stop hard-coded credentials from entering source control.

Implements automated secrets scanning in CI/CD pipelines by integrating gitleaks and trufflehog so leaking API keys, tokens or passwords are detected and blocked before deployments across GitHub Actions, GitLab CI, or Jenkins.

Uses Aqua Security Trivy to scan container images, filesystems, IaC, and Kubernetes manifests for vulnerabilities, secrets, and license issues while generating SBOMs and integrating into CI/CD pipelines for triage-ready reports.

Guides security teams through hands-on Kubernetes penetration testing—covering reconnaissance, KPI scanning (kube-hunter, Kubescape, kube-bench), RBAC exploitation, secret extraction, and compliance checks to validate cluster resilience.