Skill UI

Guides teams through securing serverless compute (AWS Lambda, Azure Functions, Google Cloud Functions) by enforcing least-privilege IAM, replacing hardcoded secrets with managed stores, embedding dependency scanning in CI/CD, validating inputs, and monitoring runtimes to block injections, credential theft, and supply-chain attacks.

Guides offensive security testing for web applications, APIs, infrastructure, dependencies, and secrets, including OWASP Top 10 audits, static/dependency scanning, API/infra checks, and report workflows that support authorized penetration tests.

Guides Go teams through GitHub Actions CI/CD setup that covers testing, linting, vetting, SAST, vuln scanning, dependency automation, coverage, and GoReleaser-driven releases so every pipeline decision balances speed, signal, and security.