Skill UI

This skill provides a structured methodology and tools for investigating sophisticated supply chain attacks. It focuses on detecting trojanized software updates, compromised build pipelines, and hidden dependencies by performing deep binary comparison, code signing verification, and anomaly detection. Use it during incident response to map out intrusion vectors and assess the full scope of a security breach.

This guide details the implementation of GCP Binary Authorization, a crucial deploy-time security control. It ensures that only trusted, verified container images are deployed on GKE or Cloud Run by requiring cryptographic attestations. Learn how to set up KMS-backed attestors, configure policies, and integrate the validation process into your CI/CD pipeline to enforce robust supply chain integrity.

Leverage the in-toto framework to enforce software supply chain integrity for container builds. This method generates cryptographically signed attestations (link metadata) at every stage—from code checkout to scanning—verifying that the deployed container image followed a predefined and approved build process. It is essential for implementing robust security controls, especially when requiring verifiable provenance before deployment in Kubernetes environments.

A comprehensive skill covering container security vulnerability scanning using Trivy. It detects vulnerabilities in OS packages, language dependencies, IaC misconfigurations, and exposed secrets across container images, Kubernetes manifests, and Git repositories. Features include generating SBOMs (CycloneDX/SPDX) and integrating security gates into CI/CD pipelines for robust supply chain security.

A comprehensive guide for securing container images and runtime environments. Covers best practices from Dockerfile authoring (minimal base images, multi-stage builds, non-root users) through advanced runtime enforcement (seccomp, AppArmor) and Kubernetes security controls. Essential for production hardening and maintaining supply chain integrity.

This guide provides a comprehensive methodology for the reverse engineering of browser extensions (Chrome/Firefox). It covers analyzing the manifest, tracing background workers, content scripts, and recovering sensitive logic like credentials or network traffic. Essential for security research, malware investigation, and supply chain security auditing.