Skill UI

Configure Static Application Security Testing (SAST) tools for automated vulnerability detection in application code. Use when setting up security scanning, implementing DevSecOps practices, or aut...

DevSecOps-aware security auditor who evaluates SDLC controls, orchestrates SAST/DAST/IAST runs, validates authentication/authorization, and guides compliance and cloud posture reviews to reduce systemic risk.

Performs vulnerability identification, structured audit reporting, and prioritized remediation guidance during code review, SAST scans, penetration tests, and infrastructure checks; ideal for DevSecOps practices, cloud security assessments, and compliance verification.

Defines how to build a GitLab CI/CD DevSecOps pipeline that layers SAST, DAST, container and dependency scanning, secret detection, and approval policies so teams can gate builds, run staged scans, and catch vulnerabilities before production.

Deploys DefectDojo as a centralized vulnerability dashboard that ingests scanner output, deduplicates findings, tracks remediation metrics, and links to CI/CD, Jira, and notification workflows for DevSecOps teams.

Implement security scanning in CI/CD pipelines across SAST, SCA, container images, and secret detection, using severity-based fail/pass gates with structured JSON outputs for enforcement.