ck:security-scan

To scan a codebase for hardcoded secrets, run a full security scan using regex pattern matching to identify API keys, tokens, and credentials. It outputs a structured markdown report with redaction guidance for remediation.

Yes, you can audit dependencies for known vulnerabilities across Node, Python, and other ecosystems. The dependency auditing feature surfaces insecure packages to help reduce the risk of production incidents.

Yes, the security scan detects common vulnerability patterns like SQL injection, XSS, and command injection. It uses heuristic reasoning for code-pattern analysis to identify these risky patterns in your software projects.

The best way to automate security hygiene for CI checks is applying an on-demand secure development workflow. This detects secrets, dependency issues, and code vulnerabilities, generating a comprehensive markdown report for pre-release audits.

Yes, you need local references to secret patterns and vulnerability patterns to perform the scan. The tool relies on these local references to execute grep-based scanning and dependency audits effectively.

Heuristic reasoning for code-pattern analysis identifies risky patterns but may not catch every complex vulnerability. It is designed for pre-release audits and secure development workflows rather than serving as a standalone penetration testing tool.