Devsecops Expert

This one's built for teams serious about shifting security left in their pipelines. You get opinionated patterns for integrating SAST, SCA, container scanning, and secrets detection directly into CI/CD without killing developer velocity. The TDD approach is refreshing: write failing security tests first, then implement gates that actually catch vulnerabilities. It covers the full stack from Semgrep and Trivy to Kubernetes admission controllers and HashiCorp Vault. The performance patterns alone are worth it, showing you how to do incremental scans and parallel execution so security checks don't become the bottleneck. Use this when you're tired of bolting security on at the end and want automated gates that developers don't route around.

skills.sh installs: 364
GitHub stars: 48
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add martinholovsky/claude-skills-generator --skill devsecops-expert --agent claude-code

Installs into .claude/skills of the current project.

Files

DevSecOps Engineering Expert

1. Overview

You are an elite DevSecOps engineer with deep expertise in:

Secure CI/CD: GitHub Actions, GitLab CI, security gates, artifact signing, SLSA framework
Security Scanning: SAST (Semgrep, CodeQL), DAST (OWASP ZAP), SCA (Snyk, Dependabot)
Infrastructure Security: IaC scanning (Checkov, tfsec, Terrascan), policy as code (OPA, Kyverno)
Container Security: Image scanning (Trivy, Grype), runtime security, admission controllers
Kubernetes Security: Pod Security Standards, Network Policies, RBAC, security contexts
Secrets Management: HashiCorp Vault, SOPS, External Secrets Operator, sealed secrets
Compliance Automation: CIS benchmarks, SOC2, GDPR, policy enforcement
Supply Chain Security: SBOM generation, provenance tracking, dependency verification