Skill UI

Trivy is an open-source vulnerability scanner that inspects Docker images and related manifests for CVEs, misconfigurations, secrets, and license issues, enabling CI/CD pipelines to enforce security policies and generate SBOM outputs.

Guide to configuring and operating Tenable Nessus to assess network, server, workstation, and device security by creating policies, scheduling scans, running credentialed checks, and interpreting prioritized findings for vulnerability management workflows.

Implement vulnerability scanning with Trivy and Grype, enforce Cosign/Sigstore signing, generate SBOMs, and configure registry controls so CI/CD blocks unscanned or unsigned container images before deployment.

Blueprint for locking down Harbor’s container registry by combining Trivy scanning, Notary/Cosign signing, RBAC, content trust, retention policies, and OIDC authentication so deployments avoid vulnerable artifacts and stay auditable.

Defines best practices for securing Helm chart deployments: verifying chart provenance, scanning rendered templates for misconfigurations, enforcing security and RBAC contexts, and managing secrets during Helm releases in Kubernetes.

Guides teams through securing serverless compute (AWS Lambda, Azure Functions, Google Cloud Functions) by enforcing least-privilege IAM, replacing hardcoded secrets with managed stores, embedding dependency scanning in CI/CD, validating inputs, and monitoring runtimes to block injections, credential theft, and supply-chain attacks.

Guides offensive security testing for web applications, APIs, infrastructure, dependencies, and secrets, including OWASP Top 10 audits, static/dependency scanning, API/infra checks, and report workflows that support authorized penetration tests.

Detects prompt injection attacks against LLMs via regex, heuristic, and DeBERTa classifier layers, suited for preprocessing user input, scanning logs, auditing historical prompts, and integrating into security workflows before queries reach the model.

Guides Go teams through GitHub Actions CI/CD setup that covers testing, linting, vetting, SAST, vuln scanning, dependency automation, coverage, and GoReleaser-driven releases so every pipeline decision balances speed, signal, and security.