{
  "skill_name": "testing-security-stack",
  "version": "1.0.0",
  "last_updated": "2024-12-18",
  "sources": [
    {
      "name": "OWASP ZAP Documentation",
      "url": "https://www.zaproxy.org/docs/",
      "type": "official_docs",
      "description": "Official ZAP documentation for DAST scanning"
    },
    {
      "name": "Semgrep Documentation",
      "url": "https://semgrep.dev/docs/",
      "type": "official_docs",
      "description": "Semgrep static analysis rules and configuration"
    },
    {
      "name": "Trivy Documentation",
      "url": "https://aquasecurity.github.io/trivy/",
      "type": "official_docs",
      "description": "Container and filesystem vulnerability scanning"
    },
    {
      "name": "Nuclei Documentation",
      "url": "https://docs.projectdiscovery.io/tools/nuclei/",
      "type": "official_docs",
      "description": "Template-based vulnerability scanner"
    },
    {
      "name": "K6 Documentation",
      "url": "https://k6.io/docs/",
      "type": "official_docs",
      "description": "Modern load testing tool documentation"
    },
    {
      "name": "Playwright Documentation",
      "url": "https://playwright.dev/docs/intro",
      "type": "official_docs",
      "description": "Cross-browser E2E testing"
    },
    {
      "name": "SonarQube Documentation",
      "url": "https://docs.sonarqube.org/",
      "type": "official_docs",
      "description": "Code quality and security platform"
    },
    {
      "name": "Allure Documentation",
      "url": "https://docs.qameta.io/allure/",
      "type": "official_docs",
      "description": "Test reporting framework"
    },
    {
      "name": "Newman Documentation",
      "url": "https://learning.postman.com/docs/running-collections/using-newman-cli/command-line-integration-with-newman/",
      "type": "official_docs",
      "description": "Postman collection runner CLI"
    },
    {
      "name": "WireMock Documentation",
      "url": "https://wiremock.org/docs/",
      "type": "official_docs",
      "description": "API mocking and service virtualization"
    },
    {
      "name": "Locust Documentation",
      "url": "https://docs.locust.io/",
      "type": "official_docs",
      "description": "Python-based load testing"
    },
    {
      "name": "Artillery Documentation",
      "url": "https://www.artillery.io/docs",
      "type": "official_docs",
      "description": "Scenario-based load testing"
    },
    {
      "name": "Gitleaks Documentation",
      "url": "https://github.com/gitleaks/gitleaks",
      "type": "github_repo",
      "description": "Secret detection tool"
    },
    {
      "name": "CAI Documentation",
      "url": "https://github.com/aliasaria/cai",
      "type": "github_repo",
      "description": "AI-powered cybersecurity automation"
    }
  ],
  "references": [
    {
      "file": "references/security-testing.md",
      "topics": ["SAST", "DAST", "container scanning", "secret detection", "Semgrep", "Trivy", "ZAP", "Nuclei", "Gitleaks"]
    },
    {
      "file": "references/performance-testing.md",
      "topics": ["load testing", "stress testing", "K6", "Locust", "Artillery", "performance metrics"]
    },
    {
      "file": "references/api-testing.md",
      "topics": ["Newman", "Postman", "WireMock", "contract testing", "API mocking"]
    },
    {
      "file": "references/browser-testing.md",
      "topics": ["Playwright", "E2E testing", "visual regression", "Page Object Model"]
    },
    {
      "file": "references/ai-security.md",
      "topics": ["CAI", "AI agents", "penetration testing", "bug bounty", "forensics"]
    },
    {
      "file": "references/code-quality.md",
      "topics": ["SonarQube", "code coverage", "quality gates", "technical debt"]
    },
    {
      "file": "references/gap-analysis.md",
      "topics": ["IaC security", "Checkov", "contract testing", "Pact", "visual regression", "BackstopJS", "accessibility", "axe-core", "chaos engineering", "Toxiproxy", "fuzzing", "RESTler", "supply chain", "Syft", "cosign", "vulnerability management", "DefectDojo", "runtime security", "Falco", "database testing", "Flyway"]
    }
  ],
  "update_schedule": "monthly",
  "notes": "Stack documentation based on testing-security-stack Docker Compose setup at /Users/marcvance/Documents/Code/testing-security-stack"
}
