All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 31,697
- 1,321
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 21,769–21,792 of 31,697 skills
- SA 17(3) Formal CorrespondenceRequire the developer of the system, system component, or system service to: Produce, as an integral part of the development process, a formal top-levVotes: 0GitHub stars: 3,518
- SA 17(2) Security Relevant ComponentsRequire the developer of the system, system component, or system service to: Define security-relevant hardware, software, and firmware; and Provide aVotes: 0GitHub stars: 3,518
- SA 17(1) Formal Policy ModelRequire the developer of the system, system component, or system service to: Produce, as an integral part of the development process, a formal policyVotes: 0GitHub stars: 3,518
- SA 16 Developer Provided TrainingRequire the developer of the system, system component, or system service to provide the following training on the correct use and operation of the impVotes: 0GitHub stars: 3,518
- SA 15(9) Use Of Live DataUse of Live DataVotes: 0GitHub stars: 3,518
- SA 15(6) Continuous ImprovementRequire the developer of the system, system component, or system service to implement an explicit process to continuously improve the development procVotes: 0GitHub stars: 3,518
- SA 15(5) Attack Surface ReductionRequire the developer of the system, system component, or system service to reduce attack surfaces to [organization-defined].Votes: 0GitHub stars: 3,518
- SA 15(3) Criticality AnalysisRequire the developer of the system, system component, or system service to perform a criticality analysis: At the following decision points in the syVotes: 0GitHub stars: 3,518
- SA 15(13) Logging SyntaxRequire the developer of the system or system component to minimize the use of personally identifiable information in development and test environmentVotes: 0GitHub stars: 3,518
- SA 15(11) Archive System Or ComponentRequire the developer of the system or system component to archive the system or component to be released or delivered together with the correspondingVotes: 0GitHub stars: 3,518
- SA 15(10) Incident Response PlanRequire the developer of the system, system component, or system service to provide, implement, and test an incident response plan.Votes: 0GitHub stars: 3,518
- SA 15(1) Quality MetricsRequire the developer of the system, system component, or system service to: Define quality metrics at the beginning of the development process; and PVotes: 0GitHub stars: 3,518
- SA 14 Criticality AnalysisCriticality AnalysisVotes: 0GitHub stars: 3,518
- SA 13 TrustworthinessTrustworthinessVotes: 0GitHub stars: 3,518
- SA 12 Supply Chain ProtectionSupply Chain ProtectionVotes: 0GitHub stars: 3,518
- SA 12(9) Operations SecurityOperations SecurityVotes: 0GitHub stars: 3,518
- SA 12(8) Use Of All Source IntelligenceUse of All-source IntelligenceVotes: 0GitHub stars: 3,518
- SA 12(6) Minimizing Procurement TimeMinimizing Procurement TimeVotes: 0GitHub stars: 3,518
- SA 12(5) Limitation Of HarmLimitation of HarmVotes: 0GitHub stars: 3,518
- SA 12(4) Diversity Of SuppliersDiversity of SuppliersVotes: 0GitHub stars: 3,518
- SA 12(2) Supplier ReviewsSupplier ReviewsVotes: 0GitHub stars: 3,518
- SA 12(14) Identity And TraceabilityIdentity and TraceabilityVotes: 0GitHub stars: 3,518
- SA 11 Developer Testing And EvaluationRequire the developer of the system, system component, or system service, at all post-design stages of the system development life cycle, to: DevelopVotes: 0GitHub stars: 3,518
- SA 11(8) Dynamic Code AnalysisRequire the developer of the system, system component, or system service to employ dynamic code analysis tools to identify common flaws and document tVotes: 0GitHub stars: 3,518