SDL Governance

Plugin sdl from marketplace relay in savioke/relay-plugin-marketplace. Commands read from the repo's manifest — 1 month ago.

Skills (5)

• sdl-baseline

  Adopt SDL in a repo and author its security baseline. Use when the user says "initialize SDL", "add SDL to this repo", "set up the SDL baseline", or "document the security posture of this repo", or when docs/sdl/baseline.md is missing or still a stub. Scaffolds the repo (CI workflow, docs/sdl/) if i

• sdl-dep-update

  Author the routine-tier SDL record for a dependency update. Use on a branch or PR whose diff only bumps dependencies (Dependabot, Renovate, scanner, or human version bumps) in a project with a docs/sdl/ folder. Verifies the diff qualifies for the routine tier, runs the deterministic checks, writes a

• sdl-review

  Review a code diff for security implications and update the SDL evidence trail. Use before committing or opening a PR on a project that has a docs/sdl/ folder, when the user says "ready for review", "review the diff", "check this for security", or signals they're about to push. Reads the diff agains

• sdl-spec

  Scaffold a new SDL cycle and capture security-relevant requirements at the start of a feature. Use when the user is planning a new feature, branch, or substantial change on a project that has a docs/sdl/ folder, or when they say "let's plan X", "spec out Y", "I want to add Z", or have just created a

• sdl-threat-model

  Produce a STRIDE-lite threat model for the current SDL cycle. Use when architecture or design decisions are being discussed mid-feature on a project that has a docs/sdl/ folder, after sdl-spec has run, or when the user says "threat model this", "what could go wrong", or is finalizing the design. Rea

Similar plugins