sdlc-devsecops - Integrate security across the software lifecycle
Integrates supply chain security, SBOM management, policy-as-code, zero-trust architecture, and security automation into software development.
Tags
Updated: 2026-10-05Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Secure software supply chains
- Generate and manage SBOMs
- Define policies as code
- Implement zero-trust controls
- Automate security checks
- Secure CI/CD pipelines
- Manage vulnerabilities
- Automate compliance workflows
Inputs
- Source code
- Dependency manifests
- Container images
- Kubernetes configurations
- Terraform configurations
- API configurations
- CI/CD configurations
- Security policies
Outputs
- SBOM files
- Security scan results
- Policy definitions
- Compliance findings
- Vulnerability reports
- Security configuration changes
Requirements
- Linux, macOS, or Windows
- Required security tool access