All categories
DevOps & Cloud
Deployment, cloud, containers, CI/CD, monitoring, and infrastructure
- 19,580
- 816
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse devops & cloud skills
Showing 18,601–18,624 of 19,580 skills
- Contract Test DesignDesign consumer-driven contract testing strategies using Pact, verify provider contracts, and manage API evolution with contract-first approaches.Votes: 0GitHub stars: 666
- Secrets GitleaksHardcoded secret detection and prevention in git repositories and codebases using Gitleaks. Identifies passwords, API keys, tokens, and credentials through regex-based pattern matching and entropy analysis. Use when: (1) Scanning repositories for exposed secrets and credentials, (2) Implementing pre-commit hooks to prevent secret leakage, (3) Integrating secret detection into CI/CD pipelines, (4) Auditing codebases for compliance violations (PCI-DSS, SOC2, GDPR), (5) Establishing baseline sec...Votes: 0GitHub stars: 230
- Sca TrivySoftware Composition Analysis (SCA) and container vulnerability scanning using Aqua Trivy for identifying CVE vulnerabilities in dependencies, container images, IaC misconfigurations, and license compliance risks. Use when: (1) Scanning container images and filesystems for vulnerabilities and misconfigurations, (2) Analyzing dependencies for known CVEs across multiple languages (Go, Python, Node.js, Java, etc.), (3) Detecting IaC security issues in Terraform, Kubernetes, Dockerfile, (4) Integ...Votes: 0GitHub stars: 230
- Sast SemgrepStatic application security testing (SAST) using Semgrep for vulnerability detection, security code review, and secure coding guidance with OWASP and CWE framework mapping. Use when: (1) Scanning code for security vulnerabilities across multiple languages, (2) Performing security code reviews with pattern-based detection, (3) Integrating SAST checks into CI/CD pipelines, (4) Providing remediation guidance with OWASP Top 10 and CWE mappings, (5) Creating custom security rules for organization-...Votes: 0GitHub stars: 230
- PytmPython-based threat modeling using pytm library for programmatic STRIDE analysis, data flow diagram generation, and automated security threat identification. Use when: (1) Creating threat models programmatically using Python code, (2) Generating data flow diagrams (DFDs) with automatic STRIDE threat identification, (3) Integrating threat modeling into CI/CD pipelines and shift-left security practices, (4) Analyzing system architecture for security threats across trust boundaries, (5) Producin...Votes: 0GitHub stars: 230
- Continuous FuzzingApply Google's continuous fuzzing methodology using OSS-Fuzz and ClusterFuzz. Emphasizes coverage-guided fuzzing, automated bug triage, and integration into CI/CD. Use when building robust testing infrastructure or finding security vulnerabilities at scale.Votes: 0GitHub stars: 666
- Context SetterGenerate comprehensive context-setting markdown files for coding tasks by intelligently exploring codebase and structuring work with ROLE, CONSTRAINTS, STYLE, file reading order, and structured tasks. Use proactively when the user is starting a complex dev task requiring multiple steps or file reads.Votes: 0GitHub stars: 666
- Context InfrastructureRailway deployment, CI/CD workflows, GitHub Actions, and smoke tests. Handles Railway configuration, GitHub Actions workflows, deployment automation, and health checks. Use when working with deployment, CI configuration, Railway setup, or infrastructure automation, or when user mentions Railway environments, GitHub Actions, deployment issues, CI failures, "Build failed" errors, smoke test errors, CI/CD pipelines, Docker configuration, or devops workflows.Votes: 0GitHub stars: 666
- Context HandoffSave working state before compaction or session end for reliable recoveryVotes: 0GitHub stars: 666
- ContainmentSecurity incident containment playbooks for isolating threats across network, endpoint, identity, cloud, and application layers. Use for active incident response to limit threat spread and impact.Votes: 0GitHub stars: 666
- ContainersCore Principles:Votes: 0GitHub stars: 666
- Container ValidatorDockerfile best practices, Kubernetes manifest validation, container securityVotes: 0GitHub stars: 666
- Container SecurityComprehensive container security guidance including vulnerability scanning with Trivy, image hardening, secrets management, and CIS benchmark compliance. Activates when working with "container security", "image scanning", "CVE", "vulnerability", "docker security", "hardening", or "CIS benchmark".Votes: 0GitHub stars: 666
- Container Security ScannerScan images and runtime for CVEs and policy violations.Votes: 0GitHub stars: 666
- Container ScannerScans containers and Dockerfiles for security issues. Wraps Hadolint for Dockerfile linting and Trivy for container image scanning. Use when user asks to "scan Dockerfile", "lint Dockerfile", "container security", "image scan", "Dockerセキュリティ", "コンテナスキャン".Votes: 0GitHub stars: 666
- Container Registry SetupЭксперт по container registry. Используй для настройки ECR, Harbor, Docker Hub, image security и CI/CD интеграции.Votes: 0GitHub stars: 666
- Container OptimizeDocker/container optimization for size, layers, caching, and securityVotes: 0GitHub stars: 666
- Container Image OptimizerOptimize layers and use minimal base images.Votes: 0GitHub stars: 666
- Container ExpertContainer orchestration expert including Docker, Kubernetes, Helm, and service meshVotes: 0GitHub stars: 666
- Container Expert Berkantyilmaz0 MegastoreDocker, Docker Compose ve Nginx yapılandırması için uzman yetenek. Konteynerleştirme, reverse proxy, SSL sonlandırma ve üretim ortamı dağıtımı (production deployment) konularında kullanılır.Votes: 0GitHub stars: 666
- Container Best PracticesExpert guidance on dockerfile optimization, multi-stage builds, layer caching strategies, and base image selection. Activates when working with "dockerfile", "docker-compose", "multi-stage", "container optimization", "image layers", or "build cache".Votes: 0GitHub stars: 666
- Container Apps Gpu 2025Azure Container Apps GPU support 2025 features including serverless GPU, Dapr integration, and scale-to-zeroVotes: 0GitHub stars: 666
- HighTriadDesign and review systems for high concurrency, high performance, and high availability. Use when planning architecture, scaling strategies, SLOs/SLIs, load testing, resilience, failover, capacity planning, caching, data access optimization, or incident-readiness for production systems.Votes: 0GitHub stars: 3
- Git Publish Release当用户明确要求发布项目到 GitHub、创建 GitHub Release 或生成 Release Notes 时使用。根据版本历史整理发布说明;仅要求预览时不执行发布。Votes: 0GitHub stars: 48