Skill UI

Implement disaster recovery strategies and runbooks for business continuity. Plan RTO/RPO targets, compare AWS cross-region failover patterns, and run DR testing procedures.

This skill covers the setup and configuration of Static Application Security Testing (SAST) tools like Semgrep, SonarQube, and CodeQL. It guides users on creating custom security rules, integrating scans into CI/CD pipelines, and managing quality gates. The process includes optimizing scan performance, reducing false positives, and ensuring compliance with security policies across multiple programming languages.

Perform static application security testing to identify vulnerabilities in source code before deployment. Use tools like Semgrep, CodeQL, and SonarQube to integrate security gates into CI/CD pipelines and ensure compliance with secure SDLC practices.

Automate security workflows and remediation processes. Build security pipelines for scanning, compliance checks, and SOAR capabilities. Ideal for scaling security operations or implementing DevSecOps strategies. Includes scripts for secret scanning, SAST, dependency checks, and automated incident response playbooks.

This skill performs Static Application Security Testing (SAST) to detect code vulnerabilities across multiple programming languages and frameworks. It helps identify injection flaws, hardcoded secrets, and security policy violations before deployment. Suitable for code reviews, compliance checks like OWASP, and legacy code assessment. Requires source code access and is not for runtime testing.