cicd-supply-chain
From the author
Use when attacking or auditing a CI/CD pipeline or software supply chain — pwn requests, poisoned pipeline execution, compromised/mutable-tag actions, dependency confusion, registry worms, runner backdoors, OIDC trust abuse, SLSA/provenance
Install
npx skills add hypnguyen1209/offensive-claude --skill cicd-supply-chain -a claude-code
Installs to .claude/skills/cicd-supply-chain/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
Want your agent to suggest skills while you type? See how to use skills from your IDE.
Safety checks on SKILL.md
- Ships scripts we have not reviewedLow
Why 80
aiqbench computes the trust score from public signals. It is not a security audit, so read a skill before you install it.
Similar skills
Closest to this one by what they do and when they are used.
- supply-chain-attack-responseBagelHole/DevOps-Security-Agent-SkillsDetect, respond to, and prevent software supply chain attacks on package registries, container images, and CI/CD pipelines with lockfile auditing, provenance verification, and emergency response playbooks.DevOps★ 1.2K
- nw-cicd-and-deploymentnWave-ai/nWaveCI/CD pipeline design methodology, deployment strategies, GitHub Actions patterns, and branch/release strategies. Load when designing pipelines or deployment workflows.DevOps★ 622
- supply-chain-securitycoco-research/cocoUse for software supply-chain security assessment covering SBOM, SCA, CI/CD pipelines, container images, build integrity, dependency provenance, and vulnerability reachability.Security★ 961
- deployment-pipeline-designwshobson/agentsDesign multi-stage CI/CD pipelines with approval gates, security checks, and deployment orchestration. Use this skill when designing zero-downtime deployment pipelines, implementing canary rollout strategies, setting up multi-environment promotion workflows, or debugging failed deployment gates in CI/CD.DevOps★ 41.6K
- nw-devopsnWave-ai/nWaveDesigns CI/CD pipelines, infrastructure, observability, and deployment strategy. Use when preparing platform readiness for a feature.DevOps★ 622
- kubesphere-devops-pipelinekubesphere/kubesphereUse when creating, running, or managing CI/CD pipelines in KubeSphere DevOps, including pipeline API operations and run monitoringDevOps★ 17.1K
Ratings & reviews
—
no reviews
Tried this skill? Rate it to help others. Sign in
Discussion
Join the discussion. Sign in