DevOps & Cloud

Deployment, cloud, containers, CI/CD, monitoring, and infrastructure

skills in category: 20,173
pages available: 841

Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.

Open in full browser

Browse devops & cloud skills

Showing 13,249–13,272 of 20,173 skills

Implementing Infrastructure As Code Security ScanningAThis skill covers implementing automated security scanning for Infrastructure as Code (IaC) templates using tools like Checkov, tfsec, and KICS. It addresses detecting misconfigurations in Terraform, CloudFormation, Kubernetes manifests, and Helm charts before deployment, establishing policy-based governance, and integrating IaC scanning into CI/CD pipelines to prevent insecure cloud resource provisioning.devopspythongoVotes: 0GitHub stars: 61
Implementing Image Provenance Verification With CosignBSign and verify container image provenance using Sigstore Cosign with keyless OIDC-based signing, attestations, and Kubernetes admission enforcement.devopsgobashVotes: 0GitHub stars: 61
Implementing Iec 62443 Security ZonesAThis skill covers designing and implementing security zones and conduits for industrial automation and control systems (IACS) per IEC 62443-3-2. It addresses zone partitioning based on risk assessment, assigning Security Level targets (SL-T), designing conduit security controls, implementing microsegmentation with industrial firewalls, and validating zone architecture through traffic analysis and penetration testing against the Purdue Reference Model.devopspythonbashVotes: 0GitHub stars: 61
Implementing Ics Firewall With TofinoADeploy and configure Tofino industrial firewalls from Belden/Hirschmann to protect SCADA systems and PLCs using deep packet inspection for OT protocols including Modbus, EtherNet/IP, OPC, and S7comm, enforcing granular access control between ICS security zones.devopspythonreactVotes: 0GitHub stars: 61
Implementing Honeypot For Ransomware DetectionADeploys canary files, honeypot shares, and decoy systems to detect ransomware activity at the earliest possible stage. Configures canary tokens embedded in strategic file locations that trigger alerts when ransomware attempts encryption, uses honeypot network shares that mimic high-value targets, and deploys Thinkst Canary appliances for comprehensive deception-based detection. Activates for requests involving ransomware honeypots, canary files, deception technology for ransomware, or early r...devopspythongoVotes: 0GitHub stars: 61
Implementing Hashicorp Vault Dynamic SecretsBImplements HashiCorp Vault dynamic secrets engines for database credentials, AWS IAM keys, and PKI certificates with automatic generation, lease management, and credential rotation to eliminate static secrets in application configurations. Activates for requests involving Vault secrets engine configuration, dynamic database credentials, ephemeral cloud credentials, or automated secret rotation.devopspythonrustVotes: 0GitHub stars: 61
Skills DirectorySkills Directory 3 slots · $399/mo · one ad per page · sponsors can never buy grades.See placements
Implementing Hardware Security Key AuthenticationAImplements FIDO2/WebAuthn hardware security key authentication including registration ceremonies, authentication flows, YubiKey enrollment, and passkey migration strategies. Builds a complete relying party server using the python-fido2 library that supports cross-platform authenticators, resident key (discoverable credential) workflows, and user verification policies. Activates for requests involving FIDO2 implementation, WebAuthn registration, hardware security key enrollment, YubiKey integr...devopspythongoVotes: 0GitHub stars: 61
Implementing Gcp Vpc Firewall RulesAImplementing and auditing GCP VPC firewall rules to enforce network segmentation, restrict ingress and egress traffic, apply hierarchical firewall policies across the organization, and monitor firewall rule effectiveness using VPC Flow Logs.devopsrustgoVotes: 0GitHub stars: 61
Implementing Gcp Organization Policy ConstraintsAImplement GCP Organization Policy constraints to enforce security guardrails across the entire resource hierarchy, restricting risky configurations and ensuring compliance at organization, folder, and project levels.devopsgobashVotes: 0GitHub stars: 61
Implementing Gcp Binary AuthorizationBImplement GCP Binary Authorization to enforce deploy-time security controls that ensure only trusted, attested container images are deployed to Google Kubernetes Engine and Cloud Run.devopsrustgoVotes: 0GitHub stars: 61
Implementing Fuzz Testing In Cicd With AflplusplusAIntegrate AFL++ coverage-guided fuzz testing into CI/CD pipelines to discover memory corruption, input handling, and logic vulnerabilities in C/C++ and compiled applications.devopsrustgoVotes: 0GitHub stars: 61
Implementing File Integrity Monitoring With AideAConfigure AIDE (Advanced Intrusion Detection Environment) for file integrity monitoring including baseline creation, scheduled integrity checks, change detection, and alertingdevopspythondatabaseVotes: 0GitHub stars: 61
Implementing Endpoint Dlp ControlsAImplements endpoint Data Loss Prevention (DLP) controls to detect and prevent sensitive data exfiltration through email, USB, cloud storage, and printing. Use when deploying DLP agents, creating content inspection policies, or preventing unauthorized data movement from endpoints. Activates for requests involving DLP, data exfiltration prevention, content inspection, or sensitive data protection on endpoints.devopsgogitVotes: 0GitHub stars: 61
Implementing Ebpf Security MonitoringCImplements eBPF-based security monitoring using Cilium Tetragon for real-time process execution tracking, network connection observability, file access auditing, and runtime enforcement. Covers TracingPolicy CRD authoring with kprobe/tracepoint hooks, in-kernel filtering via matchArgs/matchBinaries selectors, JSON event export, and integration with SIEM pipelines. Use when building kernel-level runtime security observability for Linux hosts or Kubernetes clusters.devopspythongoVotes: 0GitHub stars: 61
Implementing Dmarc Dkim Spf Email SecurityASPF, DKIM, and DMARC form the three pillars of email authentication. Together they prevent domain spoofing, validate message integrity, and define policies for handling unauthenticated mail. Proper imdevopspythongoVotes: 0GitHub stars: 61
Implementing Devsecops Security ScanningAIntegrates Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA) into CI/CD pipelines using open-source tools. Covers Semgrep for SAST, Trivy for SCA and container scanning, OWASP ZAP for DAST, and Gitleaks for secrets detection. Activates for requests involving DevSecOps pipeline setup, automated security scanning in CI/CD, SAST/DAST/SCA integration, or shift-left security implementation.devopspythonbashVotes: 0GitHub stars: 61
Implementing Delinea Secret Server For PamBImplements Delinea Secret Server for privileged access management (PAM) including secret vault configuration, role-based access policies, automated password rotation, session recording, and integration with Active Directory and cloud platforms. Activates for requests involving PAM deployment, privileged credential vaulting, secret server administration, or password rotation automation.devopsgoshellVotes: 0GitHub stars: 61
Implementing Deception Based Detection With CanarytokenADeploy and monitor Canary Tokens via the Thinkst Canary API for deception-based breach detection using web bug tokens, DNS tokens, document tokens, and AWS key tokens.devopspythonawsVotes: 0GitHub stars: 61
Implementing Continuous Security Validation With BasADeploy Breach and Attack Simulation tools to continuously validate security control effectiveness by safely emulating real-world attack techniques across the kill chain.devopspythongoVotes: 0GitHub stars: 61
Implementing Container Network Policies With CalicoAEnforce Kubernetes network segmentation using Calico CNI network policies and global network policies to control pod-to-pod traffic, restrict egress, and implement zero-trust microsegmentation.devopspythonrustVotes: 0GitHub stars: 61
Implementing Code Signing For ArtifactsAThis skill covers implementing code signing for build artifacts to ensure integrity and authenticity throughout the software supply chain. It addresses signing binaries, packages, and containers using GPG, Sigstore, and platform-specific signing tools, establishing trust chains, and verifying signatures in deployment pipelines.devopsrustbashVotes: 0GitHub stars: 61
Implementing Cloud Workload ProtectionAImplements cloud workload protection using boto3 and google-cloud APIs for runtime security monitoring, process anomaly detection, and file integrity checking on EC2/GCE instances. Scans for cryptomining, reverse shells, and unauthorized binaries. Use when building runtime security controls for cloud compute workloads.devopspythongoVotes: 0GitHub stars: 61
Implementing Cloud Trail Log AnalysisAImplementing AWS CloudTrail log analysis for security monitoring, threat detection, and forensic investigation using Athena, CloudWatch Logs Insights, and SIEM integration to identify unauthorized access, privilege escalation, and suspicious API activity.devopsgobashVotes: 0GitHub stars: 61
Implementing Cloud Dlp For Data ProtectionAImplementing Cloud Data Loss Prevention (DLP) using Amazon Macie, Azure Information Protection, and Google Cloud DLP API to discover, classify, and protect sensitive data across cloud storage, databases, and data pipelines.devopspythongoVotes: 0GitHub stars: 61