codebase-quality:security

What problem does it solve?

Identify and prevent security vulnerabilities including exposed secrets, dependency vulnerabilities, and code injection risks.

Core Features & Use Cases

• Secrets detection across codebases to prevent leakage of API keys, tokens, and credentials.
• Dependency vulnerability auditing for both frontend and backend packages, with guidance to update or patch vulnerable libraries.
• Injection risk checks and secure coding patterns, including parameterized queries and input sanitization.
• Use Case: Integrate security scans into pull requests to ensure only secure code proceeds to review.

Quick Start

Run the security scan at the start of an audit to identify secrets, dependencies, and injection risks.