iso27001-compliance

You're a solo founder, indie hacker, or one-person DevOps team. You need to:

• Set up CI/CD pipelines across 5 different platforms
• Harden your Linux servers (but you forgot the sysctl parameters)
• Write that Terraform module for the 47th time
• Remember how CloudTrail works... again
• Configure Kubernetes security contexts properly
• Actually understand what SOC2 needs

You can't remember everything. You shouldn't have to.

---

This repo is a comprehensive knowledge base designed to be loaded into AI agents. It's your DevOps second brain — battle-tested scripts, production-ready configs, and expert knowledge organized using the [Agent Skills](https://agentskills.io) format:

| Domain | What You Get |

|--------|--------------|

| 🔧 DevOps | CI/CD, containers, K8s, observability, release management |

| 🔒 Security | Scanning, secrets, hardening, network security, incident response |

| ☁️ Infrastructure | AWS, Azure, GCP, servers, networking, databases, storage |

| 📋 Compliance | SOC2, HIPAA, GDPR, PCI-DSS, governance, auditing |

---

This isn't just documentation. Each skill includes:

```

skill/

├── SKILL.md # AI-readable instructions & knowledge

├── scripts/ # Ready-to-run automation scripts

├── references/ # Deep-dive guides & cheatsheets

└── assets/ # Config templates & examples

```

🎯 Real Examples

Need to debug a crashing pod?

```bash

./devops/orchestration/kubernetes-ops/scripts/pod-debug.sh my-pod

```

Hardening a fresh Linux server?

```bash

./security/hardening/linux-hardening/scripts/harden-system.sh --apply

```

Setting up Vault from scratch?

```bash

./security/secrets/hashicorp-vault/scripts/vault-init.sh

```

Collecting evidence during an incident?

```bash

./security/operations/incident-response/scripts/collect-evidence.sh INC-2024-001

```

---

[Agent Skills](https://agentskills.io) is an open format for extending AI agent capabilities. Here's the flow:

```

┌─────────────────────────────────────────────────────────────────┐

│ 1. DISCOVER 2. MATCH 3. ACTIVATE │

│ │

│ Agent scans → User asks about → Agent reads full │

│ skill folders Kubernetes SKILL.md + runs │

│ at startup debugging scripts as needed │

└─────────────────────────────────────────────────────────────────┘

```

Each SKILL.md has YAML frontmatter (name + description) that agents load at startup for matching, and markdown instructions that get loaded only when the skill is activated. This keeps context usage efficient.

📖 Full spec: [agentskills.io/specification](https://agentskills.io/specification)

---

1. Download the Skills

```bash

# Clone to your skills directory

git clone https://github.com/bagelhole/DevOps-Security-Agent-Skills.git ~/.skills/devops-security

# Or add as a submodule to your project

git submodule add https://github.com/bagelhole/DevOps-Security-Agent-Skills.git .skills/devops-security

```

2. Integrate with Your Agent

Filesystem-based agents (Cursor, Claude with computer use, Cline, etc.) are the easiest — the agent can read skills directly:

```bash

# Agent reads skill when needed

cat ~/.skills/devops-security/devops/orchestration/kubernetes-ops/SKILL.md

```

Tool-based agents need skills injected into the system prompt. Use the [skills-ref](https://github.com/agentskills/agentskills/tree/main/skills-ref) CLI:

```bash

# Generate XML for your agent's system prompt

skills-ref to-prompt ~/.skills/devops-security/devops/ci-cd/*

# Output:

#

#

# github-actions

# Build, test, and deploy with GitHub Actions workflows...

# ~/.skills/devops-security/devops/ci-cd/github-actions/SKILL.md

#

# ...

#

```

3. Validate Skills (Optional)

```bash

# Check skill format is correct

skills-ref validate ~/.skills/devops-security/security/secrets/hashicorp-vault

```

For Humans

No agent? No problem. Browse the skills, copy the scripts, use the configs. It's MIT licensed — go wild.

---