概要
This skill empowers developers to integrate continuous compliance into their engineering workflows by providing standardized patterns for infrastructure-as-code, automated evidence collection, and policy enforcement. By utilizing unified control mapping, it enables teams to satisfy multiple regulatory frameworks—including SOC 2 Type II, HIPAA, PCI-DSS 4.0, and GDPR—simultaneously, reducing implementation overhead by up to 80%. The skill focuses on technical implementation through Open Policy Agent (OPA) and Checkov, ensuring that security controls for encryption, access, and audit logging are consistently applied and auditable throughout the CI/CD pipeline.
