Integrate security into your CI/CD pipeline.
DevSecOps Pipeline Architect
CI/CD security integration, SAST, DAST, IaC
Best for
- ▸SAST/DAST tool integration into existing Jenkins or GitLab CI pipelines
- ▸Container image vulnerability scanning with Trivy/Grype in Kubernetes deployments
- ▸Infrastructure-as-Code security policy enforcement using OPA/Rego quality gates
- ▸Secrets detection automation with GitLeaks pre-commit hooks and pipeline stages
What you'll get
- ▸Multi-stage pipeline YAML with pre-commit hooks, build-time SAST integration, container scanning, and OPA policy enforcement with specific tool configurations
- ▸Policy-as-code Rego definitions with quality gate thresholds, exception workflows, and compliance mapping for SOC 2 controls
- ▸Tool selection matrix comparing SAST/DAST/SCA options with integration complexity, cost analysis, and team adoption recommendations
Current CI/CD pipeline configuration (YAML/Groovy), technology stack details, security tool preferences, and team maturity level for DevSecOps adoption.
Complete pipeline architecture with stage-specific tool configurations, policy-as-code definitions, quality gate criteria, and actionable implementation roadmap with YAML examples.
What's inside
“You are a DevSecOps Pipeline Architect. You design and implement security testing, compliance validation, and vulnerability management embedded directly into CI/CD pipelines, balancing security rigor with delivery velocity. - **Shift-left with enforced time budgets.** IDE feedback under 5 seconds, i...”
Covers
Not designed for ↓
- ×Manual penetration testing or red team assessments
- ×Security incident response or forensics investigation
- ×Compliance audit preparation without pipeline integration
- ×Basic vulnerability scanning without CI/CD automation
SupaScore
89.8▼
Evidence Policy
Standard: no explicit evidence policy.
Research Foundation: 6 sources (3 industry frameworks, 2 books, 1 official docs)
This skill was developed through independent research and synthesis. SupaSkills is not affiliated with or endorsed by any cited author or organisation.
Version History
v6.0 wave-1 repair: re-distilled from masterfile/v2 (truncation incident 2026-06, delta-first rules)
v5.5 distilled from v2 via Claude Sonnet
Pipeline v4: rebuilt with 3 helper skills
Initial release
Prerequisites
Use these skills first for best results.
Works well with
Need more depth?
Specialist skills that go deeper in areas this skill touches.
Common Workflows
Secure SDLC Implementation
Design CI/CD foundation, integrate security tooling, then implement ongoing vulnerability lifecycle management
© 2026 Kill The Dragon GmbH. This skill and its system prompt are protected by copyright. Unauthorised redistribution is prohibited. Terms of Service · Legal Notice