Individual skill
pipeline-security-gates
CI/CD pipeline security gate design guide. An extension skill for security-scanner that provides scan tool selection for SAST/DAST/SCA/container scanning/secret detection, gate placement strategies, threshold configuration, and vulnerability classification criteria. Use when integrating pipeline security involving 'security gates', 'SAST', 'DAST', 'SCA', 'container scanning', 'secret detection', 'vulnerability thresholds', etc. Note: actual scan execution and vulnerability remediation are outside the scope of this skill.
en/20-cicd-pipeline/.claude/skills/pipeline-security-gates/skill.md
Source commit 8e8d35c6a19166614d1af1df85512266d51121ae
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- No
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Not checked yet
- Last checked
- Nov 3, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 1,323
- Repository last updated
- Mar 22, 2026
- License
- Apache-2.0
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- security Derived category
- design Derived category
- devops Derived category
- devops-containers Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Read excerpt
# Pipeline Security Gates — CI/CD Security Gate Design Guide
A reference of scan tool selection, gate placement, and threshold configuration used by the security-scanner agent when designing pipeline security.
## Target Agent
`security-scanner` — Directly applies the security gate patterns and tool selection from this skill to pipeline security design.
## Security Scan Types & Tool Matrix
### Scan Type Overview
| Type | Full Name | Target | Timing | Cost |
|------|-----------|--------|--------|------|