feat: add NIST CSF 2.0 nist_csf field to all 754 cybersecurity skills

Mapped every skill to NIST CSF 2.0 subcategory IDs (GV/ID/PR/DE/RS/RC functions)
based on subdomain and content analysis. Restores 11 skills corrupted during
prior rebase, re-enriching with ATLAS, D3FEND, NIST AI RMF, and CSF 2.0 fields.

All 754 skills now carry structured mappings for all 5 security frameworks:
- MITRE ATT&CK (in tags)
- MITRE ATLAS v5.5 (atlas_techniques)
- MITRE D3FEND v1.3 (d3fend_techniques)
- NIST AI RMF 1.0 (nist_ai_rmf)
- NIST CSF 2.0 (nist_csf)
This commit is contained in:
mukul975
2026-04-06 11:17:31 +02:00
parent e8105a2f4d
commit efca3ec611
754 changed files with 12847 additions and 2832 deletions
@@ -1,17 +1,29 @@
---
name: implementing-infrastructure-as-code-security-scanning
description: >
This skill covers implementing automated security scanning for Infrastructure as Code
(IaC) templates using tools like Checkov, tfsec, and KICS. It addresses detecting
misconfigurations in Terraform, CloudFormation, Kubernetes manifests, and Helm charts
before deployment, establishing policy-based governance, and integrating IaC scanning
into CI/CD pipelines to prevent insecure cloud resource provisioning.
description: 'This skill covers implementing automated security scanning for Infrastructure as Code (IaC) templates using
tools like Checkov, tfsec, and KICS. It addresses detecting misconfigurations in Terraform, CloudFormation, Kubernetes manifests,
and Helm charts before deployment, establishing policy-based governance, and integrating IaC scanning into CI/CD pipelines
to prevent insecure cloud resource provisioning.
'
domain: cybersecurity
subdomain: devsecops
tags: [devsecops, cicd, iac-security, checkov, tfsec, terraform, secure-sdlc]
tags:
- devsecops
- cicd
- iac-security
- checkov
- tfsec
- terraform
- secure-sdlc
version: 1.0.0
author: mahipal
license: Apache-2.0
nist_csf:
- PR.PS-01
- GV.SC-07
- ID.IM-04
- PR.PS-04
---
# Implementing Infrastructure as Code Security Scanning