Home / Stacks / DevSecOps Pipeline
🛡️

DevSecOps Pipeline

Shift security left in CI/CD — scan containers and infrastructure-as-code, catch dependency CVEs, sign artifacts for supply chain integrity, enforce policy-as-code, and gate every build on security

8 skills · Works with Claude Code, Codex, Cursor & more

⚙️ Engineering
RARE

Trivy Vulnerability Scanner

Scan container images, filesystems, and git repos for CVEs, misconfigurations, exposed secrets, and license issues with Trivy. Covers Docker/OCI images, IaC (Terraform, Kubernetes, Dockerfile), SBOM generation, and gating builds in CI on severity thresholds.

Community 4.2K
Scanned
security vulnerability-scanning containers
mkdir -p ~/.claude/skills/trivy-scanner && curl -fsSL https://raw.githubusercontent.com/TerminalSkills/skills/main/skills/trivy/SKILL.md -o ~/.claude/skills/trivy-scanner/SKILL.md
⚙️ Engineering
RARE

Checkov IaC Security

Catch infrastructure-as-code misconfigurations before they ship with Checkov by Prisma Cloud. Scans Terraform, CloudFormation, Kubernetes, Helm, Dockerfile, and ARM for insecure defaults, writes custom policies, suppresses false positives, and gates CI on policy violations.

Community 3.3K
Scanned
security iac terraform
mkdir -p ~/.claude/skills/checkov-iac && curl -fsSL https://raw.githubusercontent.com/TerminalSkills/skills/main/skills/checkov/SKILL.md -o ~/.claude/skills/checkov-iac/SKILL.md
⚙️ Engineering
RARE

Snyk Vulnerability Scanning

Find and fix vulnerabilities in code, open-source dependencies, containers, and IaC with Snyk. Scans npm, PyPI, and more for CVEs, suggests upgrade paths and patches, checks Docker images and Terraform, and integrates security gates into pull requests and CI.

Community 3.8K
Scanned
security sca dependency-scanning
mkdir -p ~/.claude/skills/snyk-scanning && curl -fsSL https://raw.githubusercontent.com/TerminalSkills/skills/main/skills/snyk/SKILL.md -o ~/.claude/skills/snyk-scanning/SKILL.md
⚙️ Engineering
RARE

Grype & Syft SBOM Scanner

Generate SBOMs and scan for known vulnerabilities with Anchore's Syft and Grype. Build accurate software bills of materials for container images and filesystems, scan them for CVEs, track dependency exposure over time, and enforce vulnerability policies in CI.

Community 2.6K
Scanned
security sbom supply-chain
mkdir -p ~/.claude/skills/grype-sbom && curl -fsSL https://raw.githubusercontent.com/TerminalSkills/skills/main/skills/grype/SKILL.md -o ~/.claude/skills/grype-sbom/SKILL.md
⚙️ Engineering
RARE

Cosign & Sigstore Signing

Sign and verify container images and artifacts with Cosign and Sigstore for supply chain integrity. Set up keyless signing with OIDC, attach SBOM and provenance attestations, verify signatures in admission controllers, and enforce signed-only deploys in CI/CD.

Community 1.9K
Scanned
security supply-chain sigstore
mkdir -p ~/.claude/skills/cosign-sigstore && curl -fsSL https://raw.githubusercontent.com/TerminalSkills/skills/main/skills/cosign/SKILL.md -o ~/.claude/skills/cosign-sigstore/SKILL.md
⚙️ Engineering
RARE

Semgrep Static Analysis

Run lightweight static analysis on your code using Semgrep. Supports 30+ languages with customizable rules for security vulnerabilities, bug patterns, and code style enforcement.

Trail of Bits 2.8K
Scanned
security sast static-analysis
mkdir -p ~/.claude/skills/semgrep-sast && curl -fsSL https://raw.githubusercontent.com/trailofbits/skills/HEAD/plugins/semgrep-rule-creator/skills/semgrep-rule-creator/SKILL.md -o ~/.claude/skills/semgrep-sast/SKILL.md
⚙️ Engineering
RARE

Open Policy Agent (OPA)

Enforce policy-as-code across your stack with Open Policy Agent, the CNCF policy engine. Write Rego policies for Kubernetes admission control, API authorization, Terraform validation, and CI gates — with unit tests, coverage, and OPA/Gatekeeper or Conftest integration.

Community 2.5K
Scanned
security policy-as-code rego
mkdir -p ~/.claude/skills/opa-policy && curl -fsSL https://raw.githubusercontent.com/TerminalSkills/skills/main/skills/opa/SKILL.md -o ~/.claude/skills/opa-policy/SKILL.md
⚙️ Engineering
RARE ★

GitHub Actions CI/CD

Create and optimize GitHub Actions workflows for CI/CD pipelines. Generates workflow YAML with proper caching, matrix builds, environment secrets, and reusable workflows following GitHub's latest best practices.

Community 5.8K
Scanned
github-actions ci-cd automation
mkdir -p ~/.claude/skills/github-actions && curl -fsSL https://raw.githubusercontent.com/Jeffallan/claude-skills/HEAD/skills/devops-engineer/SKILL.md -o ~/.claude/skills/github-actions/SKILL.md

More Stacks

🤝

Agent Engineering Kit

Engineer reliable AI agents — build on the Claude Agent SDK, coordinate teams with multi-agent patterns, give them memory, and keep them safe with mechanical guardrails and evaluation
🕹️

AI Agent Frameworks

Pick the right framework and ship agents fast — type-safe Python with Pydantic AI, multi-agent orchestration with OpenAI Agents SDK, Agno, and CrewAI, TypeScript graphs with LangGraph.js, and typed workflows with Mastra
🤖

AI Builder Stack

Build AI-powered applications with RAG, multi-agent systems, prompt engineering, and MCP integrations

View all stacks →

Added to wishlist