{
  "id": "salesforce-devsecops-pipeline-skill",
  "name": "Salesforce DevSecOps Pipeline Skill",
  "type": "skill",
  "provider": "salesforce",
  "harnesses": ["codex", "claude-code", "cursor", "gemini", "kiro", "other"],
  "summary": "Structured DevSecOps review workflow for Salesforce pipelines covering SCA finding triage, sandbox data governance and PII masking, change impact analysis across metadata dependencies, CI/CD security gate compliance, and DevOps Center deployment governance.",
  "source_type": "original",
  "official_docs": [
    "https://developer.salesforce.com/docs/platform/salesforce-code-analyzer/guide/index.html",
    "https://help.salesforce.com/s/articleView?id=sf.data_masking_intro.htm",
    "https://developer.salesforce.com/docs/atlas.en-us.sfdx_dev.meta/sfdx_dev/sfdx_dev_develop.htm"
  ],
  "security_notes": "Read-only static review; sanitized inputs only; never requests live org credentials, session tokens, or API access. Risk register is advisory; remediation requires human authorization.",
  "last_verified": "2026-05-21",
  "path": "skills/salesforce/salesforce-devsecops-pipeline-skill",
  "author": "github: VincentChuWaiChow",
  "version": "0.1.0"
}