CI/CD Security

CI/CD Security is a DevOps skill for Claude Code, published by shuvonsec in claude-bug-bounty.

4.2K stars767 forkson shuvonsec/claude-bug-bountyAdded 2026/08/16+1% in starsRepository updated 2026/08/10

ai-securitybug-bountybugcrowdclaude-aiclaude-codectiethical-hackinghackeronehackinghacking-toolpenetration-testingreconvulnerability-scanner

Install in seconds

Install CI/CD Security

Copy CI/CD Security into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.

terminal

npx degit https://github.com/shuvonsec/claude-bug-bounty/tree/main/skills/cicd-security ~/.claude/skills/cicd-security

Requires Node.js. Downloads this skill only — not the rest of the repository — into your Claude Code skills folder.

Without Node.js

git clone https://github.com/shuvonsec/claude-bug-bounty.git

Clones the whole repository, then copy the skill’s own directory into your skills folder yourself.

In this catalog

Source file: skills/cicd-security/SKILL.md in shuvonsec/claude-bug-bounty
Installs to: ~/.claude/skills/cicd-security
Collection: One of 16 skills cataloged from this repository
Category: DevOps — 798 skills

What CI/CD Security does

CI/CD Security audits CI/CD pipelines for workflow injection, secret exfiltration, self-hosted runner poisoning, OIDC token theft, and supply chain attacks. Use it when a target has public repos or CI/CD infrastructure.

CI/CD Security is cataloged under DevOps on DirSkills. CI/CD Security comes from a repository tagged ai-security, bug-bounty, bugcrowd, claude-ai and claude-code.

Documentation

README

Excerpt

CI/CD SECURITY — Pipeline Attack Surface

CI/CD pipelines are high-value targets — a single workflow injection can give you code execution on the build server, read ALL org secrets, and push backdoored releases to production.

0. QUICK KILL CHECKLIST

This is the opening of the README. Read the full README on GitHub.

Frequently asked about CI/CD Security

What else does shuvonsec publish alongside CI/CD Security?
CI/CD Security is one of 16 skills that DirSkills catalogs from shuvonsec/claude-bug-bounty, the repository it ships in. Its siblings there include Argus, Bug Bounty and Bug Bounty. Each one is a separate skill with its own page in this directory, installs the same way CI/CD Security does, and is maintained by shuvonsec in that same repository. The rest of the collection is listed on the shuvonsec/claude-bug-bounty page.
How does CI/CD Security compare to other DevOps skills?
CI/CD Security ranks #180 by stars among the 798 DevOps skills in this catalog. The most-starred ones next to it are Backend Patterns, API Connector Builder and Migration. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of CI/CD Security against them. Open each page to compare what they document and how they install.