Skill UI

This guide provides methods to implement robust data handling, secret detection, and compliance patterns within code reviews (e.g., GDPR, CCPA). It teaches users how to configure CodeRabbit to exclude sensitive files (like .env or keys), detect hardcoded secrets, limit the review scope to active source code, and ensure that PII is properly handled during the CI/CD process.

Detects fail-open insecure defaults such as hardcoded secrets, weak auth, or permissive security that allow production apps to run unsafely, guiding auditors through discovery, verification, confirmation, and reporting steps during security reviews or deployment validation.

This comprehensive guide details how to configure robust multi-environment deployments (Development, Staging, Production) within the Replit ecosystem. It covers best practices for database separation, managing environment-specific secrets, implementing reliable environment detection logic, and setting up CI/CD pipelines to ensure applications are stable and secure across all deployment stages.

A comprehensive guide to configuring Vercel across Development, Preview, and Production environments. Learn how to scope environment variables, manage secrets, and automate multi-stage deployments using both the Vercel CLI and REST API. Covers setting up custom environments (e.g., Staging) and implementing environment detection in code for reliable application behavior.

Automates comprehensive security scanning by integrating SAST (Semgrep), DAST (OWASP ZAP), SCA (Trivy), and secrets detection (Gitleaks) into CI/CD pipelines. This solution helps organizations shift security left, detect vulnerabilities early, and meet strict compliance mandates such as SOC 2, PCI-DSS, and ISO 27001.

This skill guides the integration of gitleaks and trufflehog into CI/CD pipelines. It automates the detection of hardcoded secrets, such as API keys, passwords, and tokens, preventing their accidental deployment. By integrating scans as a mandatory pre-deployment gate, organizations enforce strong security policies and maintain compliance.

A comprehensive guide to deploying cloud-native deception across AWS, Azure, and GCP. This skill utilizes decoy resources—such as canary IAM keys, honey object storage buckets, and decoy secrets—whose sole purpose is to generate high-fidelity alerts the instant they are interacted with by an attacker. It detects cloud reconnaissance, credential theft, and lateral movement by wiring detection through native logging services (CloudTrail, Sentinel, Cloud Audit Logs), ensuring near-zero false positives for the SOC.

This comprehensive guide details how to use industry-leading tools like TruffleHog and git-secrets to scan source code repositories, full git history, and configuration files for hardcoded AWS credentials and secrets. It is essential for integrating secrets detection into CI/CD pipelines, performing proactive security audits, and ensuring compliance by preventing sensitive keys from reaching production environments.