Securing Cloud And Supply Chain

It covers container escapes, RBAC tightening, admission policies, supply chain attestation with SLSA and Sigstore, cloud IAM anti-patterns, and secrets management. The philosophy is paranoid by design: sign everything, verify everywhere, least privilege by default, and treat internal networks like hostile territory. You'll get concrete policy snippets and minimum-permission examples instead of vague best practice platitudes. If you're debugging why your Terraform has wildcard actions or your GitHub Actions are leaking AWS keys, this skill will walk you through the fix and the OIDC migration path.