Initial commit - 611 cybersecurity skills across all subdomains

2026-07-29 15:40:58 +03:00 · 2026-02-25 10:47:44 +01:00
commit 22a7ab1462
1765 changed files with 280648 additions and 0 deletions
@@ -0,0 +1,26 @@
+# Workflows - Harbor Registry Security
+
+## Workflow 1: Secure Image Pipeline
+```
+[Build Image] --> [Push to Harbor] --> [Auto-Scan (Trivy)] --> [Sign (Cosign)]
+                                              |
+                                    +---------+---------+
+                                    |                   |
+                                    v                   v
+                            Vulnerabilities?     No vulnerabilities
+                            Block deployment     Allow pull
+```
+
+## Workflow 2: Registry Hardening
+```
+Step 1: Enable HTTPS with valid TLS certificates
+Step 2: Configure OIDC/LDAP authentication
+Step 3: Create projects with auto-scan enabled
+Step 4: Enable vulnerability prevention policy
+Step 5: Configure content trust (Cosign)
+Step 6: Set immutable tag rules for release tags
+Step 7: Configure retention policies
+Step 8: Enable audit logging
+Step 9: Create robot accounts for CI/CD
+Step 10: Test with vulnerability gate check
+```