All categories
DevOps & Cloud
Deployment, cloud, containers, CI/CD, monitoring, and infrastructure
- 19,628
- 818
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse devops & cloud skills
Showing 14,041–14,064 of 19,628 skills
- Implementing Secrets Scanning In Ci CdIntegrate gitleaks and trufflehog into CI/CD pipelines to detect leakedVotes: 0GitHub stars: 67
- Implementing Secrets Management With Vault'Deploy HashiCorp Vault for centralized secrets management, covering dynamicVotes: 0GitHub stars: 67
- Implementing Secret Scanning With Gitleaks'This skill covers implementing Gitleaks for detecting and preventingVotes: 0GitHub stars: 67
- Implementing Runtime Security With TetragonImplements eBPF-based runtime observability and in-kernel enforcement in Kubernetes with Cilium Tetragon, monitoring process execution, file access, network connections, and syscalls, and blocking dangerous calls at the kernel level. Use when deploying Tetragon to detect or block syscalls such as ptrace, mount, and unshare, enforcing kernel-level policy, or adding low-overhead runtime detection to a cluster. Keywords: Tetragon, Cilium, eBPF, TracingPolicy, kprobe, enforcement, process lineage...Votes: 0GitHub stars: 67
- Implementing Ransomware Kill Switch Detection'Analyzes ransomware kill switch mechanisms, including mutex-based executionVotes: 0GitHub stars: 67
- Implementing Ransomware Backup Strategy'Designs a ransomware-resilient backup strategy using the 3-2-1-1-0Votes: 0GitHub stars: 67
- Implementing Policy As Code With Open Policy Agent'Implements policy-as-code enforcement with Open Policy Agent (OPA)Votes: 0GitHub stars: 67
- Implementing Pod Security Admission ControllerConfigures and operates the Kubernetes Pod Security Admission (PSA) controller that enforces Pod Security Standards: namespace enforce/audit/warn labels, cluster-wide defaults via AdmissionConfiguration, exemptions for usernames, runtime classes and namespaces, version pinning, and troubleshooting pods the controller rejected. Use when wiring PSA up on a cluster, setting cluster-wide default enforcement, exempting system namespaces, debugging why a pod was rejected or why enforcement is not f...Votes: 0GitHub stars: 67
- Implementing Patch Management WorkflowPatch management is the systematic process of identifying, testing, deploying,Votes: 0GitHub stars: 67
- Implementing Passwordless Authentication With Fido2Deploy FIDO2/WebAuthn passwordless authentication using security keysVotes: 0GitHub stars: 67
- Implementing Passwordless Auth With Microsoft Entra'Implements passwordless authentication using Microsoft Entra ID withVotes: 0GitHub stars: 67
- Implementing Pam For Database AccessDeploy privileged access management for database systems including Oracle,Votes: 0GitHub stars: 67
- Implementing Ot Incident Response Playbook'Develops OT-specific incident response playbooks using a SANS PICERL-based PythonVotes: 0GitHub stars: 67
- Implementing Opa Gatekeeper For Policy EnforcementDeploys OPA Gatekeeper via Helm as a Kubernetes admission controller and writes ConstraintTemplates with Rego plus instantiated Constraints to validate, mutate, or deny resource requests at admission time. Use when enforcing custom policy-as-code at admission on Kubernetes v1.24+, blocking non-compliant workloads before scheduling, or expressing a rule that built-in controls cannot. Keywords: Gatekeeper, ConstraintTemplate, Constraint, Rego, admission webhook, audit, mutation. Do not use for ...Votes: 0GitHub stars: 67
- Implementing Network Segmentation For Ot'Implements OT network segmentation using VLANs, OT-aware firewalls, data diodes,Votes: 0GitHub stars: 67
- Implementing Network Policies For KubernetesWrites portable upstream Kubernetes NetworkPolicy YAML - default-deny-all, DNS egress, namespace and pod selector rules - that works on any conformant CNI such as Calico or Cilium. Use when segmentation must stay CNI-portable, introducing a default-deny posture, or restricting east-west traffic between pods and namespaces without depending on a vendor CRD. Keywords: NetworkPolicy, default deny, podSelector, namespaceSelector, ingress, egress, CNI portable. Do not use for Calico-specific resou...Votes: 0GitHub stars: 67
- Implementing Network Intrusion Prevention With SuricataDeploys and configures Suricata as an inline network intrusion prevention system,Votes: 0GitHub stars: 67
- Implementing Network Deception With HoneypotsDeploy and manage network honeypots using OpenCanary, T-Pot, or CowrieVotes: 0GitHub stars: 67
- Implementing Mobile Application Management'Implements Mobile Application Management (MAM) policies to protect enterpriseVotes: 0GitHub stars: 67
- Implementing Mitre Attack Coverage MappingImplement MITRE ATT&CK coverage mapping to identify detection gaps, prioritizeVotes: 0GitHub stars: 67
- Implementing Microsegmentation With Guardicore'Implements microsegmentation with Akamai Guardicore Segmentation to mapVotes: 0GitHub stars: 67
- Implementing Memory Protection With Dep Aslr'Implements memory protection mechanisms including DEP (Data ExecutionVotes: 0GitHub stars: 67
- Implementing Log Forwarding With FluentdConfigures Fluent Bit as an endpoint log forwarder and Fluentd as the central aggregator for centralized log collection, routing, filtering, and enrichment, covering input plugins for syslog/file-tailing/application logs and output routing to Elasticsearch, S3, and Splunk. Use when setting up centralized log aggregation across distributed infrastructure or generating Fluent Bit/Fluentd configuration files for a new log pipeline.Votes: 0GitHub stars: 67
- Implementing Kubernetes Pod Security StandardsChooses and applies the correct Kubernetes Pod Security Standard (Privileged, Baseline, Restricted) for a workload: what each profile forbids, how to map existing workloads to a profile, which securityContext fields must change, and how to plan a PodSecurityPolicy-to-PSS migration without breaking running pods. Use when deciding which pod security profile a namespace or workload should run under, auditing which workloads would fail Restricted, planning a PSP migration, or mapping pod security...Votes: 0GitHub stars: 67