Detect security and compliance issues in code repositories using pattern matching and rule sets.
npx skills add https://github.com/dandacompany/bluekiwi --skill bk-scan
Please help me install this Agent Skill. Skill: bk-scan Source: https://github.com/dandacompany/bluekiwi/tree/main/packages/cli/src/assets/skills/bk-scan Command: npx skills add https://github.com/dandacompany/bluekiwi --skill bk-scan
This Skill automates the detection of security vulnerabilities and compliance risks within code repositories, reducing manual review efforts and enhancing software security.
Ask the AI to initiate a security scan on your project directory, review the findings, and decide whether to attach these to a task for further remediation.
High-intent search queries and answers about installing and using this skill.
Automating security vulnerability detection in a code repository requires scanning local files using pattern matching and predefined rule sets. This Skill automates that detection process to identify hardcoded secrets and high-risk PII before deployment.
Yes, you can use custom rule configurations for compliance scanning by defining specific scan parameters. This allows the static analysis to adapt to various security standards and regulatory requirements within your project files.
Scanning local repositories for hardcoded secrets and PII involves running automated pattern analysis against your project directory. You can ask the AI to initiate a security scan to automatically identify these risks and review the findings.
Static analysis for compliance audits is the process of scanning code repositories without executing the program to detect security vulnerabilities. It uses configurable rule parameters to ensure software adheres to regulatory standards.
Yes, you need static analysis tools to run repository security scans. These tools provide the foundational pattern matching capabilities required to execute the rule sets and detect compliance risks within your code.
Reviewing security scan findings involves analyzing the detected vulnerabilities from your project directory scan. After the AI generates the findings, you can decide whether to attach these results to a task for further remediation.
p-o-ke-naeConfigure Semprep, SonarQube, CodeQL SAST scanning in CI/CD pipelines.
matteocervelliGenerate project assessment Markdown reports from structured JSON data.
xkl2013Execute a code review checklist for quality, security, and maintainability.
linardsbAssess vulnerabilities and verify compliance across cloud and application systems.
