kata-security-review

What problem does it solve?

It prevents security regressions by systematically reviewing the implemented code changes against common real-world vulnerabilities and weak auth patterns.

Core Features & Use Cases

• OWASP Top 10 verification: Checks each relevant category explicitly in the changed diff, capturing file/line evidence and actionable recommendations.
• Authentication & authorization assessment: Validates endpoint protections, permission checks, ownership enforcement, and token data exposure.
• Sensitive data & dependency risk control: Flags credential leakage, unsafe error/log output, and runs CVE scanning for touched dependencies with severity-based prioritization.
• Gate-ready reporting: Consolidates findings into a structured markdown report and updates the workflow checkpoint for orchestrated progression.

Quick Start

Run a security review pass by examining your pull request diff against the kata steps and write the results to .ahrena/issues/{n}/05-security-review.md.