Skill UI

This skill guides the setup of Continuous Integration and Continuous Deployment (CI/CD) pipelines for Salesforce projects using GitHub Actions. It covers automated metadata deployment, rigorous Apex unit testing, and integration testing, ensuring code quality and stability before every release. Key steps include configuring JWT authentication, setting up GitHub Secrets, and defining multi-stage workflows to validate and deploy changes across environments.

This guide provides a comprehensive workflow for configuring and managing Salesforce integrations across multiple environments, including Development, various Sandboxes (QA, Staging), and Production. It covers best practices for environment-specific credential handling, utilizing secrets managers (Vault, AWS/GCP), and establishing robust CI/CD deployment promotion flows using Salesforce CLI and code examples.

This guide provides comprehensive steps for deploying Shopify applications (including extensions and functions) to various production cloud hosting platforms, such as Vercel, Fly.io, and Google Cloud Run. It covers critical aspects like environment configuration, setting up necessary webhooks, utilizing the Shopify CLI for deployment, and best practices for securely handling platform-specific secrets and ensuring production stability. Use this when moving a local Shopify app to a live e-commerce environment.

Implement comprehensive automated policy enforcement for Shopify apps, ensuring security and adherence to App Store guidelines. This skill includes ESLint rules for detecting hardcoded API secrets, enforcing GraphQL query cost budgets, and running pre-commit hooks and CI checks for critical compliance validations (e.g., GDPR webhooks). Use it when hardening a production-ready Shopify application.

Master the deployment of applications connected to Snowflake across various cloud environments, including serverless functions (AWS Lambda, Cloud Run) and containers. This guide covers best practices for secure connection management, connection pooling, handling secrets (like private keys), and ensuring application reliability in production settings.

Configure secure and isolated Webflow integrations across development, staging, and production environments. This guide details how to manage separate API tokens, Site IDs, and secure secrets using industry-standard secret managers like HashiCorp Vault, AWS Secrets Manager, and GCP Secret Manager, ensuring data integrity and reliable deployment in a CI/CD pipeline.

A comprehensive playbook detailing advanced techniques for attacking Kubernetes clusters. Covers API server access, RBAC privilege escalation, service account token abuse, etcd secrets extraction, Kubelet exploitation, and various container escapes. This guide is essential for security professionals and red teams performing deep security assessments on cloud-native infrastructure.

Master the design, debugging, and hardening of production-grade GitHub Actions CI/CD pipelines. This skill covers advanced topics including reusable workflows, matrix builds, self-hosted runners, OIDC authentication, secrets management, environment protection, and complex trigger patterns (e.g., workflow_call, schedule, release). Use this to automate complex build, test, and deployment processes.

Dep handles the entire journey from local code to production deployment. This skill automates containerization using Docker and docker-compose, establishes robust CI/CD pipelines (linting, testing, security scanning, deployment), manages environment variables and secrets, and generates Infrastructure as Code (Terraform/Pulumi) configurations. It ensures observability and provides rollback procedures.

A comprehensive guide to deploying cloud-native deception across AWS, Azure, and GCP. This skill utilizes decoy resources—such as canary IAM keys, honey object storage buckets, and decoy secrets—whose sole purpose is to generate high-fidelity alerts the instant they are interacted with by an attacker. It detects cloud reconnaissance, credential theft, and lateral movement by wiring detection through native logging services (CloudTrail, Sentinel, Cloud Audit Logs), ensuring near-zero false positives for the SOC.

This skill guides the implementation of dynamic secrets using HashiCorp Vault. It focuses on generating short-lived, ephemeral credentials for services like databases (PostgreSQL, MySQL), AWS IAM, and PKI certificates. By automating credential generation, lease management, and rotation, it eliminates the risk associated with storing long-lived static secrets, ensuring compliance with zero-trust security models (PCI-DSS, NIST).

This comprehensive guide details how to use industry-leading tools like TruffleHog and git-secrets to scan source code repositories, full git history, and configuration files for hardcoded AWS credentials and secrets. It is essential for integrating secrets detection into CI/CD pipelines, performing proactive security audits, and ensuring compliance by preventing sensitive keys from reaching production environments.