Automate security validation of the ValueOS codebase with SAST, DAST, and secret scanning.
npx skills add https://github.com/Valynt/ValueOS --skill security-audit-valynt
Please help me install this Agent Skill. Skill: security-audit Source: https://github.com/Valynt/ValueOS/tree/main/.windsurf/skills/security-audit Command: npx skills add https://github.com/Valynt/ValueOS --skill security-audit-valynt
This skill provides a comprehensive, automated security validation framework that scans codebases for vulnerabilities, misconfigurations, and policy violations, reducing manual review efforts.
Run the security-audit workflow in your CI to initiate a full security sweep across the repository.
High-intent search queries and answers about installing and using this skill.
Automate vulnerability scanning by running the security-audit workflow in your CI pipeline to execute a full sweep using SAST, DAST, gitleaks, and dependency checks. This integration identifies vulnerabilities and policy violations during development.
Comprehensive security validation scans application code, dependencies, infrastructure, and secrets to detect vulnerabilities, misconfigurations, and policy violations. It combines SAST, DAST, dependency checks, secret scanning, and license compliance assessments into a single automated process.
Yes, you can use Semgrep and Trivy together for codebase security audits. The workflow integrates these tools alongside Snyk and gitleaks to perform static analysis, dependency vetting, and secrets detection across your repositories.
Enforce compliance and security policies by integrating automated validation into your CI/CD pipelines. The security-audit workflow assesses license compliance and infrastructure configurations, ensuring organizational security standards are met before deployment.
Prevent supply-chain risks by running automated dependency vetting and license checks within your development cycle. The security-audit workflow evaluates dependencies during CI to identify vulnerable packages and enforce compliance before deployment.
camoneartConfigure Semgrep, SonarQube, and CodeQL for automated vulnerability detection in CI/CD pipelines.
micaelmaltaIdentify and remediate security vulnerabilities across code, configuration, and architecture.
xlelibertyPerform offensive security assessments with vulnerability scanning and penetration testing.
NickCrewIdentify and mitigate security vulnerabilities in CI/CD pipelines.
