{
  "id": "stack-profile:security-operations",
  "_kind": "StackProfile",
  "_file": "domain/stack-profiles/deep-stacks-1.yaml",
  "_cluster": "domain",
  "attributes": {
    "displayName": "Security Operations Stack (Trivy, Falco, OPA, Vault, Snyk)",
    "description": "A defense-in-depth security toolchain for cloud-native environments\ncovering vulnerability scanning, runtime threat detection, policy\nenforcement, and secrets management. Trivy scans container images,\nfilesystems, and IaC templates for known vulnerabilities and\nmisconfigurations. Falco monitors Linux kernel syscalls at runtime to\ndetect anomalous behavior — container escapes, unexpected network\nconnections, and privilege escalations.\n\nOPA (Open Policy Agent) enforces admission control policies on\nKubernetes resources and API requests using Rego rules. Vault manages\nsecrets, certificates, and dynamic credentials with automatic rotation.\nSnyk integrates into CI pipelines for dependency vulnerability analysis\nand license compliance. Go and Python are the primary languages for\ncustom policy engines and automation scripts. This stack suits security\nteams responsible for container and Kubernetes environments.\n",
    "composes": [
      "tool:trivy",
      "tool:falco",
      "tool:opa",
      "tool:vault",
      "tool:snyk",
      "language:go",
      "language:python"
    ]
  },
  "outgoingEdges": [
    {
      "from": "stack-profile:security-operations",
      "to": "tool:trivy",
      "kind": "composed_of"
    },
    {
      "from": "stack-profile:security-operations",
      "to": "tool:falco",
      "kind": "composed_of"
    },
    {
      "from": "stack-profile:security-operations",
      "to": "tool:opa",
      "kind": "composed_of"
    },
    {
      "from": "stack-profile:security-operations",
      "to": "tool:vault",
      "kind": "composed_of"
    },
    {
      "from": "stack-profile:security-operations",
      "to": "tool:snyk",
      "kind": "composed_of"
    },
    {
      "from": "stack-profile:security-operations",
      "to": "language:go",
      "kind": "composed_of"
    },
    {
      "from": "stack-profile:security-operations",
      "to": "language:python",
      "kind": "composed_of"
    },
    {
      "from": "stack-profile:security-operations",
      "to": "tool:kubernetes",
      "kind": "composed_of"
    },
    {
      "from": "stack-profile:security-operations",
      "to": "tool:docker",
      "kind": "composed_of"
    },
    {
      "from": "stack-profile:security-operations",
      "to": "role:security-engineer",
      "kind": "used_by_role"
    },
    {
      "from": "stack-profile:security-operations",
      "to": "role:devops-engineer",
      "kind": "used_by_role"
    },
    {
      "from": "stack-profile:security-operations",
      "to": "role:platform-engineer",
      "kind": "used_by_role"
    },
    {
      "from": "stack-profile:security-operations",
      "to": "workflow:container-image-hardening",
      "kind": "follows_workflow"
    },
    {
      "from": "stack-profile:security-operations",
      "to": "workflow:iac-security-scanning",
      "kind": "follows_workflow"
    },
    {
      "from": "stack-profile:security-operations",
      "to": "domain:security",
      "kind": "applies_to"
    },
    {
      "from": "stack-profile:security-operations",
      "to": "domain:cybersecurity",
      "kind": "applies_to"
    },
    {
      "from": "stack-profile:security-operations",
      "to": "skill-area:vulnerability-scanning",
      "kind": "requires_skill_area"
    },
    {
      "from": "stack-profile:security-operations",
      "to": "skill-area:runtime-security",
      "kind": "requires_skill_area"
    },
    {
      "from": "stack-profile:security-operations",
      "to": "skill-area:policy-enforcement",
      "kind": "requires_skill_area"
    },
    {
      "from": "stack-profile:security-operations",
      "to": "skill-area:container-security",
      "kind": "requires_skill_area"
    },
    {
      "from": "stack-profile:security-operations",
      "to": "skill-area:threat-detection",
      "kind": "requires_skill_area"
    }
  ],
  "incomingEdges": []
}