managing-vulnerabilities - Manage vulnerability scanning and CI/CD security gates
Implement multi-layer security scanning, SBOM generation, risk-based prioritization, and CI/CD security gates.
Tags
Updated: 2026-09-30Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Scan container images
- Analyze source code
- Test running applications
- Analyze dependencies
- Detect committed secrets
- Generate CycloneDX SBOMs
- Generate SPDX SBOMs
- Prioritize vulnerabilities by risk
- Configure CI/CD security gates
- Scan Kubernetes manifests
Inputs
- Container images
- Source code
- Software dependencies
- Running applications
- Repository contents
- Kubernetes manifests
- CVSS scores
- EPSS scores
- CISA KEV status
- Asset criticality
- Network exposure
Outputs
- Scan results
- SBOM files
- Vulnerability priority scores
- CI/CD security gate statuses
- SARIF reports
- Security alerts
Requirements
- CI/CD pipeline
- Security scanning tools
- Container runtime for image builds
- Repository access
- Permission to upload artifacts
- Access to vulnerability data sources