managing-vulnerabilities

SKILL.md

Implement comprehensive vulnerability detection and remediation workflows across containers, source code, dependencies, and running applications. This skill covers multi-layer scanning strategies, SBOM generation (CycloneDX and SPDX), risk-based prioritization using CVSS/EPSS/KEV, and CI/CD security gate patterns.

Vulnerability management requires scanning at multiple layers. Each layer detects different types of security issues.

For detailed tool selection guidance, see references/tool-selection.md.

Implementing multi-layer security scanning (container, SAST, DAST, SCA, secrets), SBOM generation, and risk-based vulnerability prioritization in CI/CD pipelines. Use when building DevSecOps workflows, ensuring compliance, or establishing security gates for container deployments. Source: ancoleman/ai-design-components.

View raw