Security Testing Patterns

About

This skill provides expert guidance for establishing a robust security posture throughout the software development lifecycle. By implementing a layered approach—from static analysis (SAST) and dependency scanning (SCA) to dynamic testing (DAST) and manual penetration testing—it enables developers to identify and remediate vulnerabilities early. Whether you are building automated security pipelines in CI/CD, auditing APIs against OWASP standards, or performing complex logic validation, this skill offers structured workflows to prioritize risks and ensure high-standard application security.

Key Features

• 7 GitHub stars
• Comprehensive SAST, DAST, and SCA integration patterns
• Automated security pipeline configuration for CI/CD
• OWASP-aligned API security testing methodologies
• Risk-based vulnerability triage and remediation workflows
• Manual penetration testing and business logic validation

Use Cases

• Integrating automated security scanning into GitHub Actions or GitLab CI/CD
• Validating API endpoints against the OWASP API Security Top 10
• Conducting deep-dive security audits and vulnerability assessments of web applications