sk Skill · anantbhandarkar
mir-devsecops
Make It Right (DevSecOps pillar). Constraint-first protocol for the path from commit to production — AI writes pipelines that go green, not pipelines safe to trust. Covers: supply chain (dependency pinning and lockfile integrity, install-script execution, typosquatting and slopsquatting of AI-hallucinated package names, SBOM, Sigstore/SLSA provenance); CI identity (the pull_request_target class of GitHub Actions…
Open on skills.sh ↗read 2026-09-15
- installs 8w
- 0
- 30-day movement
- starts with the next reading
- Related entries
- 1
- Connections
- 10
Python
- Host repository
- anantbhandarkar/make-it-right
- Allowed tools
- Read, Write, Edit, Bash, Glob, Grep, Agent, AskUserQuestion, WebFetch, WebSearch
- Host stars
- 15
- Host language
- Python