Security Detection Utility

Detect security-critical file changes by analyzing staged files with pattern-based detection. Run `python detect_infrastructure.py --git-staged` to identify infrastructure and authentication files that pose risk, then review them before committing.

Security detection flags infrastructure files (CI/CD workflows, Terraform, CloudFormation), authentication code, secrets management, and access control files using defined regular expressions. Risk levels distinguish critical from high-risk patterns.

Yes, security detection integrates into CI/CD workflows and pre-commit hooks with non-blocking exit codes. Analyze specific files or staged changes across Python 3 and PowerShell environments for cross-platform use.

Analyze specific files by passing them directly: `python detect_infrastructure.py .github/workflows/ci.yml src/auth/login.cs`. The utility scans explicitly listed files and outputs structured risk findings with actionable guidance.

The utility outputs structured findings that distinguish critical from high-risk patterns, with recommendations to trigger security agent review. Results integrate seamlessly into pre-commit and CI workflows without blocking builds.

Yes, security detection applies to Git-based repositories, CI/CD workflows, and project directories. Analyze staged files or explicitly list files; the utility supports cross-platform execution via Python 3 and PowerShell.