Skill UI

A comprehensive skill covering container security vulnerability scanning using Trivy. It detects vulnerabilities in OS packages, language dependencies, IaC misconfigurations, and exposed secrets across container images, Kubernetes manifests, and Git repositories. Features include generating SBOMs (CycloneDX/SPDX) and integrating security gates into CI/CD pipelines for robust supply chain security.

This skill provides comprehensive methods for securing Helm chart deployments on Kubernetes. It covers validating chart provenance through signature verification, scanning templates for misconfigurations (using tools like kubesec and checkov), enforcing strict pod/container security contexts, managing secrets via external stores, and implementing precise RBAC controls within CI/CD pipelines. Ideal for compliance and robust security architecture.

This guide details securing the CAST AI integration across multiple layers. It covers best practices for API key management (including rotation and secrets storage), implementing least-privilege RBAC using 'kubectl', deploying the Kvisor security agent for runtime scanning, and setting up Kubernetes Network Policies to restrict egress traffic. Use this when hardening production clusters or performing security audits.