“CI/CD”

CI/CD pipeline design, optimization, DevSecOps security scanning, and troubleshooting.

Expert design, generation, validation, optimization, and troubleshooting of GitLab CI/CD pipelines.

Use when a Threadlight pilot must reach production through a CI/CD pipeline instead of the agent running `azd up` directly — prod deploys run under a…

Scans GitHub Actions workflows and CI/CD pipeline configurations for supply chain attack vectors including unpinned actions, script injection via expressions…

Design and generate CI/CD pipelines from project stack signals across GitHub Actions, GitLab CI, CircleCI, and Buildkite.

Wires Promptfoo and DeepTeam into CI/CD for automated, repeatable red-teaming of LLM apps against OWASP LLM Top 10, OWASP Agentic, and MITRE ATLAS presets…

Scan source code repositories, CI/CD pipelines, and configuration files for exposed AWS credentials using TruffleHog, git-secrets, and AWS-native detection.

Generate pragmatic CI/CD pipelines from detected project stack signals — fast baseline generation, repeatable checks, environment-aware deployment stages.

Design and implement a comprehensive DevSecOps pipeline in GitLab CI/CD integrating SAST, DAST, container scanning, dependency scanning, and secret detection.

create and review ci/cd automation for bruno api tests.

Expert implementation and optimization of GitHub Actions CI/CD pipelines.

Wire Promptfoo and DeepTeam into CI/CD for automated regression red-teaming of LLM apps against OWASP LLM Top 10 and OWASP Agentic presets, failing the build…

Configure a GitLab CI/CD pipeline that embeds SAST (Semgrep, SpotBugs, Gosec, Bandit, NodeJsScan), DAST, container scanning, dependency scanning, and secret…

CI/CD pipelines with Git, GitHub Actions, GitLab CI, Jenkins, and deployment strategies.

Build GitHub Actions CI/CD and agentic workflows; Dependabot, Lefthook, and zizmor audits.

Generate and optimize GitHub Actions CI/CD workflows.

DevOps for CI/CD, containers, Kubernetes, and Terraform.

Implement CI/CD pipelines for Databricks using Databricks Asset Bundles (DABs), GitHub Actions, and Terraform.

Work with GitHub Actions CI/CD workflows - read live syntax, monitor runs, and debug failures.

Use when asked to design serverless architecture, create CloudFormation templates, optimize AWS costs, set up CI/CD pipelines, or migrate to AWS.

Automates security checkpoints within CI/CD pipelines (Safe-to-Ship).

This skill covers integrating OWASP ZAP (Zed Attack Proxy) for Dynamic Application Security Testing in CI/CD pipelines.

This skill covers integrating Static Application Security Testing (SAST) tools—CodeQL and Semgrep—into GitHub Actions CI/CD pipelines.

This skill covers implementing Software Composition Analysis (SCA) using Snyk to detect vulnerable open-source dependencies in CI/CD pipelines.