Scan project dependencies and source code for CVEs using Trivy.
npx skills add https://github.com/kagenti/kagenti --skill cve-scan
Please help me install this Agent Skill. Skill: cve:scan Source: https://github.com/kagenti/kagenti/tree/main/.claude/skills/cve%3Ascan Command: npx skills add https://github.com/kagenti/kagenti --skill cve-scan
This Skill automates the comprehensive security scanning of project dependencies and source code to identify Common Vulnerabilities and Exposures (CVEs) and potential security weaknesses, preventing the deployment of vulnerable code.
cve:scan to ensure no high-severity CVEs are present in its dependencies or code, and that no sensitive vulnerability details are exposed in its README.Run a full security scan on the current project, outputting results to the .cves directory.
High-intent search queries and answers about installing and using this skill.
To scan dependencies for known CVEs before deployment, you can run a comprehensive security scan that analyzes dependency manifests and container images using Trivy to identify vulnerable packages and prevent vulnerable code from shipping.
Finding security flaws automatically involves scanning source code and dependencies for common vulnerability patterns using Trivy alongside LLM reasoning, which provides comprehensive vulnerability detection and prevents the deployment of insecure code.
Yes, you can integrate this vulnerability scan into your CI/CD pipelines as a gating mechanism, blocking deployments when high-severity CVEs are detected in project dependencies or source code.
Trivy scans both container images and project code, analyzing dependency manifests and source files to detect known CVEs and common security flaws across your entire project.
Checking documentation for accidental CVE disclosure involves auditing your project files to detect and remove sensitive vulnerability details that may have been exposed in READMEs or other docs.
kfolkesScan container images, filesystems, Git repositories, and IaC for vulnerabilities and secrets.
jeremylongshoreScan container images and running containers for vulnerabilities using Trivy or Snyk.
aquariuscookAutomate security auditing, vulnerability scanning, and compliance validation with SAST/DAST tools.
LeoWSY-hashblueScan source code for vulnerabilities, secrets, and dependency CVEs.