All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 31,788
- 1,325
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 22,585–22,608 of 31,788 skills
- PW.7.1 Pw71Determine whether code review (a person looks directly at the code to find issues) and/or code analysis (tools are used to find issues in code, eitherVotes: 0GitHub stars: 3,518
- PW.6.2 Pw62Determine which compiler, interpreter, and build tool features should be used and how each should be configured, then implement and use the approved cVotes: 0GitHub stars: 3,518
- PW.6.1 Pw61Use compiler, interpreter, and build tools that offer features to improve executable security.Votes: 0GitHub stars: 3,518
- PW.5.1 Pw51Follow all secure coding practices that are appropriate to the development languages and environment to meet the organization’s requirements.Votes: 0GitHub stars: 3,518
- PW.4.4 Pw44Verify that acquired commercial, open-source, and all other third-party software components comply with the requirements, as defined by the organizatiVotes: 0GitHub stars: 3,518
- PW.4.2 Pw42Create and maintain well-secured software components in-house following SDLC processes to meet common internal software development needs that cannotVotes: 0GitHub stars: 3,518
- PW.4.1 Pw41Acquire and maintain well-secured software components (e.g., software libraries, modules, middleware, frameworks) from commercial, open-source, and otVotes: 0GitHub stars: 3,518
- PW.2.1 Pw21Have 1) a qualified person (or people) who were not involved with the design and/or 2) automated processes instantiated in the toolchain review the soVotes: 0GitHub stars: 3,518
- PW.1.3 Pw13Where appropriate, build in support for using standardized security features and services (e.g., enabling software to integrate with existing log m...Votes: 0GitHub stars: 3,518
- PW.1.2 Pw12Track and maintain the software’s security requirements, risks, and design decisions.Votes: 0GitHub stars: 3,518
- PW.1.1 Pw11Use forms of risk modeling – such as threat modeling, attack modeling, or attack surface mapping – to help assess the security risk for the software.Votes: 0GitHub stars: 3,518
- Provide A Mechanism For VerifyingHelp software acquirers ensure that the software they acquire is legitimate and has not been tampered with.Votes: 0GitHub stars: 3,518
- Protect All Forms Of Code FromHelp prevent unauthorized changes to code, both inadvertent and intentional, which could circumvent or negate the intended security characteristics...Votes: 0GitHub stars: 3,518
- Archive And Protect Each SoftwarePreserve software releases in order to help identify, analyze, and eliminate vulnerabilities discovered in the software after release.Votes: 0GitHub stars: 3,518
- PS.3.2 Ps32Collect, safeguard, maintain, and share provenance data for all components of each software release (e.g., in a software bill of materials .SBOM).Votes: 0GitHub stars: 3,518
- PS.3.1 Ps31Securely archive the necessary files and supporting data (e.g., integrity verification information, provenance data) to be retained for each softwareVotes: 0GitHub stars: 3,518
- PS.2.1 Ps21Make software integrity verification information available to software acquirers.Votes: 0GitHub stars: 3,518
- PS.1.1 Ps11Store all forms of code – including source code, executable code, and configuration-as-code – based on the principle of least privilege so that onl...Votes: 0GitHub stars: 3,518
- Implement Supporting Toolchains Po 3Use automation to reduce human effort and improve the accuracy, reproducibility, usability, and comprehensiveness of security practices throughout ...Votes: 0GitHub stars: 3,518
- Implement Roles And Responsibilities PoEnsure that everyone inside and outside of the organization involved in the SDLC is prepared to perform their SDLC-related roles and responsibilitiesVotes: 0GitHub stars: 3,518
- Implement And Maintain SecureEnsure that all components of the environments for software development are strongly protected from internal and external threats to prevent compro...Votes: 0GitHub stars: 3,518
- Define Security Requirements ForEnsure that security requirements for software development are known at all times so that they can be taken into account throughout the SDLC and du...Votes: 0GitHub stars: 3,518
- Define And Use Criteria For SoftwareHelp ensure that the software resulting from the SDLC meets the organization’s expectations by defining and using criteria for checking the software’sVotes: 0GitHub stars: 3,518
- PO.5.2 Po52Secure and harden development endpoints (i.e., endpoints for software designers, developers, testers, builders, etc.) to perform development-related tVotes: 0GitHub stars: 3,518