| name | phase-1-foundation-weeks-1-4 |
| description | Deploy pre-commit hooks for secrets detection, branch protection with required reviews, commit signature verification, and org-wide distribution strategies. |
Phase 1: Foundation (Weeks 1-4)
When to Use This Skill
Phase 1 establishes the foundation of SDLC security through two critical control layers:
- Pre-commit Hooks - Block bad code locally before git commit
- Branch Protection - Prevent unauthorized merges at repository level
These controls work together to create defense-in-depth at the source code level.
Implementation
See the full implementation guide in the source documentation.
Related Patterns
- Pre-commit Security Gates
- Branch Protection Enforcement
- Implementation Roadmap Overview
- Phase 2: Automation →