endor-scan

To scan your code repository for security vulnerabilities before a merge, you can use this Skill to perform rapid security scans. It identifies vulnerabilities, license issues, and secrets early in the development cycle to reduce risk and remediation time.

Automating security checks in your CI/CD workflow is achieved by running this Skill to surface critical issues during code reviews. It supports both quick incremental scans and full analysis scans to fit your specific workflow needs.

Yes, this code review security scan detects license issues and secrets. It performs fast repository scanning to quickly identify vulnerabilities, license compliance problems, and exposed secrets across supported modern languages.

Yes, you need an Endor Labs MCP server and the endorctl CLI to run a repository security scan. You must configure your MCP server during the `/endor-setup` phase before executing the `/endor-scan` command in a supported runtime environment.

Yes, you can run an incremental security scan instead of a full codebase analysis. The Skill supports both quick scans for immediate feedback and full analysis scans, allowing you to choose the depth of your code review security checks.

Using Endor Labs for vetting a pull request for security risks allows you to surface critical issues early. It performs fast security scans of your repositories to identify vulnerabilities, license issues, and secrets, guiding remediation efforts before merge.