leeway-appsec-secure-sdlc
Application security capability across threat modeling, secure design, code review, SAST/DAST, fuzzing, dependency analysis, secrets and remediation verification.
Files1
View on GitHubSKILL.mdskills/cyber/appsec-secure-sdlc/SKILL.md
GitHubLeeWay AppSec & Secure SDLC
Threat model assets/trust boundaries/abuse cases, then apply appropriate secure coding, review, static/dynamic analysis, fuzzing and dependency/secrets controls. Vulnerability severity combines technical severity with reachability/exploitability/business context. Security tools finding zero issues != absence of vulnerabilities.