Skill UI

This comprehensive guide details best practices for securing Helm chart deployments within Kubernetes. It covers critical security measures including verifying chart signatures and provenance, scanning templates for configuration misconfigurations, enforcing Pod Security Contexts via values.yaml, managing sensitive data using external secret stores, and scoping RBAC roles for CI/CD pipelines. Essential for maintaining supply chain integrity and meeting compliance standards.

A professional-grade 'Living Pipeline' that integrates advanced AI reasoning into the SDLC. It provides autonomous guardrails for system security, cloud cost management (FinOps), and Kubernetes compliance. It audits Linux Kernel patches for memory vulnerabilities, detects cost drifts in Terraform plans, and generates hardened K8s manifests from natural language policies.

This comprehensive workflow guides the design, optimization, and deployment of scalable, cost-effective Google Cloud Platform (GCP) architectures for both startups and large enterprises. It covers the full lifecycle, from gathering detailed requirements (compliance, SLA) and recommending optimal patterns (Serverless, GKE, Data Pipelines) to estimating costs, generating Infrastructure as Code (IaC) using Terraform, setting up CI/CD pipelines, and completing a thorough security review.

This tool monitors Certificate Transparency (CT) logs to detect unauthorized certificate issuance for owned domains, discover hidden subdomains, and track suspicious certificate activity. By querying public CT logs and APIs (like crt.sh), it helps build continuous security pipelines, identify potential phishing infrastructure, and map the external attack surface for comprehensive threat intelligence.

A comprehensive security tool designed to detect prompt injection attacks targeting Large Language Models (LLMs). It employs a multi-layered approach combining regex signature matching, structural anomaly scoring, and advanced DeBERTa transformer classification. It is essential for securing input validation layers in chatbots, AI agents, and RAG pipelines, and for retrospectively auditing LLM interaction logs against OWASP standards.

A comprehensive guide for setting up production-grade CI/CD pipelines for Go projects using GitHub Actions. It covers all critical stages: unit testing (with race detection), linting, static application security testing (SAST), vulnerability scanning, automated dependency updates (Dependabot/Renovate), Docker image builds, and automated releases via GoReleaser. Ideal for DevOps engineers establishing or improving Go project quality gates.

A comprehensive guide to achieving high code quality in Go projects using `golangci-lint`. This skill covers the entire development lifecycle, including setting up the essential `.golangci.yml` configuration, running automated linters (style, security, complexity), automatically fixing issues, interpreting detailed lint output, and correctly suppressing false positives using `//nolint` directives. Ideal for enforcing best practices in CI/CD pipelines and maintaining legacy codebases.

This comprehensive guide outlines essential security best practices for users operating within the Apify ecosystem. Learn how to properly manage API tokens, implement environment separation (dev/staging/prod), secure proxy credentials, and sanitize sensitive data (PII) before storage. Essential for hardening data pipelines and ensuring compliance.

A comprehensive guide detailing security best practices for the Hex data analytics platform. This covers secure API key management (read vs. run scopes), implementing least privilege access, validating webhooks, and redacting sensitive data from logs. Use this guide when auditing Hex security configuration or integrating secure data pipelines.

Implements automated, multi-layered policy enforcement and guardrails for Adobe integrations. This skill provides crucial security checks, including detecting sensitive credentials (e.g., p8_ secrets), pre-screening content for services like Firefly (blocking trademarks or explicit material), and enforcing usage quotas for PDF Services. It is essential for maintaining secure and compliant CI/CD pipelines.

A comprehensive guide and implementation for setting up Continuous Integration and Continuous Deployment (CI/CD) pipelines for dApps powered by Alchemy. It utilizes GitHub Actions to automate critical Web3 workflows, including running Hardhat tests against a mainnet fork, verifying smart contract integrity, and securely deploying to testnets like Sepolia. Features built-in key exposure scanning for robust security.

This guide outlines critical security best practices for design-to-code pipelines using Anima and Figma. It covers securing API credentials by restricting token scopes (e.g., read-only access for Figma), enforcing server-side execution for SDKs, and implementing robust secret management using cloud services like GCP Secret Manager. This minimizes the risk of credential leakage in CI/CD environments.