Skill UI

A comprehensive guide detailing Apple's Human Interface Guidelines (HIG) for designing and implementing core content components (e.g., Charts, Collections, Image Views, Web Views). It provides best practices for cross-platform adaptation, accessibility, visual hierarchy, and performance optimization across iOS, macOS, tvOS, and visionOS.

A comprehensive guide and set of best practices for designing reusable, production-ready widgets in Makepad. This skill covers advanced UI patterns such as modal overlays, collapsible sections, drag-and-drop functionality, and dynamic text/image toggling, ensuring robust and consistent component architecture.

This skill details implementing robust container supply chain security using Cosign, a Sigstore tool. It supports both key-based and keyless (OIDC) signing, integrating with Fulcio and Rekor. Use it to verify image provenance, attach critical attestations (like SBOMs and SLSA), and enforce secure image policies in Kubernetes environments.

A comprehensive guide for securing container registries by enforcing vulnerability scanning (Trivy, Grype), generating Software Bill of Materials (SBOM), and implementing digital signing using Cosign and Sigstore. This solution is essential for establishing robust CI/CD pipelines and preventing supply chain attacks before image promotion.

This comprehensive guide covers the process of creating, analyzing, and securing Software Bills of Materials (SBOMs). It utilizes Syft to generate standards-compliant SBOMs (CycloneDX or SPDX) from container images and filesystems. The workflow details correlating these SBOMs with known CVEs using Grype for vulnerability analysis, and subsequently signing the artifacts with Cosign. This process is crucial for establishing supply chain trust, ensuring dependency visibility, and integrating vulnerability gating into CI/CD pipelines.