All categories
DevOps & Cloud
Deployment, cloud, containers, CI/CD, monitoring, and infrastructure
- 19,628
- 818
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse devops & cloud skills
Showing 14,065–14,088 of 19,628 skills
- Implementing Kubernetes Network Policy With CalicoInstalls Calico as the cluster CNI and writes standard Kubernetes NetworkPolicy under it, covering default-deny baselines, policy ordering and precedence, service-account-based selectors, and verifying that policy is genuinely being enforced. Use when adopting Calico as the enforcement CNI, establishing a default-deny baseline, or debugging why a NetworkPolicy is not taking effect under Calico. Keywords: Calico CNI, NetworkPolicy, default deny, policy order, Felix, service account selector. D...Votes: 0GitHub stars: 67
- Implementing Iso 27001 Information Security ManagementGuides implementation of an ISO/IEC 27001:2022 Information Security Management System (ISMS) end to end: gap analysis and scoping, risk assessment methodology, Annex A control selection, Statement of Applicability (SoA) creation, and continuous improvement. Use when scoping a new ISMS, preparing for ISO 27001 certification or audit, or selecting and documenting Annex A controls for a compliance program.Votes: 0GitHub stars: 67
- Implementing Infrastructure As Code Security Scanning'Implements automated security scanning for Infrastructure as Code usingVotes: 0GitHub stars: 67
- Implementing Image Provenance Verification With CosignSigns and verifies container image provenance with Sigstore Cosign, covering key-based and keyless OIDC signing (Fulcio, Rekor transparency log), SLSA attestations, and enforcing signature verification through Kubernetes admission control. Use when signing images for supply chain security, setting up keyless OIDC signing, attaching attestations, or enforcing a verified-images-only policy at admission. Keywords: Cosign, Sigstore, Fulcio, Rekor, keyless, attestation, cosign verify, admission po...Votes: 0GitHub stars: 67
- Implementing Iec 62443 Security Zones'Designs security zones and conduits for industrial control systemsVotes: 0GitHub stars: 67
- Implementing Ics Firewall With Tofino'Deploys and configures Tofino industrial firewalls (Belden/Hirschmann)Votes: 0GitHub stars: 67
- Implementing Honeypot For Ransomware Detection'Deploys canary files, honeypot shares, and decoy systems to detect ransomwareVotes: 0GitHub stars: 67
- Implementing Hashicorp Vault Dynamic Secrets'Configures HashiCorp Vault dynamic secrets engines for database credentials,Votes: 0GitHub stars: 67
- Implementing Hardware Security Key Authentication'Builds a FIDO2/WebAuthn relying party server with the python-fido2Votes: 0GitHub stars: 67
- Implementing Gcp Vpc Firewall RulesImplements and audits GCP VPC firewall rules using gcloud, covering auditing overly permissive rules, creating restrictive ingress/egress rules, hierarchical firewall policies, and monitoring rule effectiveness with VPC Flow Logs. Use when deploying GCP workloads needing network access controls, auditing firewall configs, or responding to Security Command Center findings; not for Cloud Armor or DNS-based filtering.Votes: 0GitHub stars: 67
- Implementing Gcp Organization Policy ConstraintsImplements GCP Organization Policy constraints via gcloud and Terraform, such as restricting external IPs, resource locations, default service accounts, and service account keys, plus dry-run testing of policy impact before enforcement. Use when enforcing security guardrails across an org's resource hierarchy, or hardening GCP config at the org, folder, or project level.Votes: 0GitHub stars: 67
- Implementing Gcp Binary AuthorizationImplements GCP Binary Authorization end to end, including creating KMS-backed attestors, Container Analysis notes, deploy-time policies, and signing image attestations, so that only trusted, verified images deploy to GKE and Cloud Run. Use when enforcing container supply-chain integrity or deploy-time attestation checks on GCP.Votes: 0GitHub stars: 67
- Implementing Fuzz Testing In Cicd With AflplusplusIntegrates AFL++ coverage-guided fuzzing into CI/CD pipelines, covering harness construction, AFL++/AddressSanitizer/CmpLog instrumentation builds, and persistent-mode fuzzing to discover memory-corruption and input-handling vulnerabilities in C/C++ code. Use when adding automated fuzz testing to a build pipeline or hunting for memory-safety bugs in native/compiled applications.Votes: 0GitHub stars: 67
- Implementing File Integrity Monitoring With AideConfigures AIDE (Advanced Intrusion Detection Environment) for file integrity monitoring on Linux, covering baseline database creation, scheduled integrity checks via cron, change detection, and alerting on unauthorized modifications. Use when setting up host-based file integrity monitoring, detecting unauthorized file changes, or meeting compliance requirements for FIM on Linux systems.Votes: 0GitHub stars: 67
- Implementing Endpoint Dlp Controls'Implements endpoint Data Loss Prevention (DLP) controls to detect andVotes: 0GitHub stars: 67
- Implementing Ebpf Security Monitoring'Implements eBPF-based security monitoring using Cilium Tetragon forVotes: 0GitHub stars: 67
- Implementing Devsecops Security Scanning'Integrates SAST, DAST, and SCA into CI/CD pipelines using Semgrep forVotes: 0GitHub stars: 67
- Implementing Delinea Secret Server For Pam'Implements Delinea Secret Server for privileged access management,Votes: 0GitHub stars: 67
- Implementing Deception Based Detection With CanarytokenDeploys and monitors Canary Tokens via the Thinkst Canary REST API forVotes: 0GitHub stars: 67
- Implementing Container Network Policies With CalicoUses Calico's own policy CRDs beyond the upstream Kubernetes API - GlobalNetworkPolicy, HostEndpoint, NetworkSet, policy tiers, and DNS-based egress rules - applied and audited with calicoctl. Use when a policy must span namespaces or protect the host itself, when egress has to be expressed by domain name, or when ordering policies into tiers. Keywords: calicoctl, GlobalNetworkPolicy, HostEndpoint, NetworkSet, tier, DNS egress, order. Do not use for portable upstream NetworkPolicy - use imple...Votes: 0GitHub stars: 67
- Implementing Code Signing For Artifacts'Implements code signing for build artifacts (binaries, packages, containers)Votes: 0GitHub stars: 67
- Implementing Cloud Workload Protection'Implements cloud workload protection using boto3 and google-cloud APIsVotes: 0GitHub stars: 67
- Implementing Cloud Trail Log Analysis'Implementing AWS CloudTrail log analysis for security monitoring, threatVotes: 0GitHub stars: 67
- Implementing Cloud Dlp For Data Protection'Implement cloud DLP using Amazon Macie, Google Cloud DLP API, MicrosoftVotes: 0GitHub stars: 67