About
This skill facilitates the second phase of SDLC hardening by integrating critical security controls directly into the CI/CD pipeline. It provides a structured framework for implementing automated gates that block insecure builds, generating Software Bill of Materials (SBOM) for transparency, and ensuring SLSA provenance. By automating evidence collection and metrics tracking, it helps teams maintain a verifiable audit trail while transitioning from foundational security setups to robust, automated enforcement in the production pipeline.
