Skill UI

Trivy scans Docker images for OS, language, configuration, secret, and license vulnerabilities, emits SARIF/CycloneDX/SPDX/JSON reports, and enforces policies via .trivyignore while integrating into GitHub Actions or GitLab CI pipelines to keep containers secure.

Use Kubesec to analyze Kubernetes manifests for privilege escalation, writable host mounts, and missing security controls, whether locally, in CI/CD, or via its API/plugin integrations.

Implements vulnerability scanning, SBOM generation, and signing workflows for container registry images using Trivy, Grype, Syft, Cosign and Sigstore, then gates CI/CD deployments and registry controls to block unverified artifacts.

Hardens GitHub Actions workflows by pinning actions to SHAs, limiting GITHUB_TOKEN permissions, shielding secrets, blocking script injection, and enforcing reviewer approvals so CI/CD pipelines resist supply-chain and privilege attacks.

Helps operators secure Helm chart releases by verifying provenance, scanning rendered templates, enforcing hardened security contexts, managing secrets externally, and applying RBAC controls in CI/CD pipelines before deployment.

Provides a WCAG 2.2 Level A/AA audit workflow for React, Next.js, Vue, Angular, Svelte, or plain HTML projects that scans, fixes, verifies, reports, checks color contrast, and integrates with CI/CD pipelines to prevent regressions.

Design scalable, cost-effective Google Cloud architectures for startups or enterprises by gathering requirements, selecting validated patterns, estimating costs and savings, producing IaC, configuring CI/CD, and reviewing IAM plus security posture.