Skill UI

This guide details how to integrate OWASP ZAP (Zed Attack Proxy) into CI/CD pipelines (GitHub Actions/GitLab) for comprehensive Dynamic Application Security Testing (DAST). It covers configuring baseline, full, and API scans to identify common vulnerabilities like XSS, SQLi, and CSRF in running web applications and REST/GraphQL APIs, ensuring security quality gates in the development lifecycle.

This guide details how to integrate Static Application Security Testing (SAST) tools like CodeQL and Semgrep into your CI/CD pipelines using GitHub Actions. It covers setting up automated vulnerability detection on pull requests, tuning rules to minimize false positives, uploading SARIF results for centralized security reporting, and enforcing quality gates to prevent vulnerable code from merging into protected branches. Essential for DevSecOps and compliance (SOC 2, PCI DSS).

A comprehensive guide to hardening GitHub Actions CI/CD workflows against modern supply chain attacks, credential theft, and privilege escalation. Learn techniques such as pinning actions to immutable SHA digests, minimizing GITHUB_TOKEN permissions, preventing script injection from untrusted inputs, and implementing required review gates for secure deployment pipelines. Essential for any project handling production secrets or elevated permissions.

A comprehensive guide to designing scalable, cost-effective, and compliant architectures on Microsoft Azure. This skill covers the entire lifecycle, from gathering detailed business requirements (SLA, RPO/RTO) and selecting appropriate service patterns (AKS, Serverless, Data Factory), to generating Infrastructure as Code (IaC) using Bicep. It also includes steps for cost optimization, reserved instance planning, and setting up robust CI/CD pipelines via Azure DevOps or GitHub Actions.

Design and implement a unified operational workflow for managing notifications sourced from disparate tools like GitHub, Linear, local hooks, and chat platforms. This skill addresses notification fragmentation, alert noise, and redundancy by establishing clear severity levels, ownership, routing channels, and next operational actions into a single, cohesive pipeline.

A comprehensive guide for setting up production-grade CI/CD pipelines for Go projects using GitHub Actions. It covers all critical stages: unit testing (with race detection), linting, static application security testing (SAST), vulnerability scanning, automated dependency updates (Dependabot/Renovate), Docker image builds, and automated releases via GoReleaser. Ideal for DevOps engineers establishing or improving Go project quality gates.

Use the gh CLI to inspect PRs, issues, workflow runs, and logs while querying GitHub resources via the API or structured JSON filters.

Comprehensive Go testing guidance that spans table-driven subtests, testify suites, mocking, unit/integration tests, benchmarks, coverage, fuzzing, goleak leak detection, snapshot checks, and GitHub Actions CI to keep production suites reliable.

This comprehensive guide provides detailed procedural steps for configuring and executing CodeQL code scanning. It covers both implementing automated workflows using GitHub Actions (`codeql.yml`) and running scans via the CodeQL CLI. Users will learn how to manage language matrices, set build modes, interpret SARIF outputs, handle monorepo structures, and troubleshoot complex security analysis setups across multiple languages (e.g., Python, Java, C++).

This skill is designed to retrieve and display detailed usage metrics for GitHub Copilot within organizations and enterprises. Users can analyze adoption rates, total suggestions, acceptance rates, and chat interactions, broken down either by the entire organization/enterprise or on a per-user basis. It supports querying data for specific historical dates using GitHub CLI and REST API.

Generates a concise, AI-optimized specification describing what an existing GitHub Actions workflow does, its triggers, requirements, inputs/outputs, and governance so teams can understand and maintain it without implementation details.

A comprehensive guide to setting up robust CI/CD pipelines for Algolia indexing. This includes running unit and integration tests against live indices, validating index settings against defined configurations, and implementing automated reindexing upon deployment (e.g., triggering on version tags). It ensures the stability and data consistency of your search service.