security-review

To identify security vulnerabilities in code changes, apply a structured security checklist covering authentication, authorization, API endpoints, secrets handling, and configuration to systematically detect and remediate risks before shipping.

An end-to-end security code review covers hardcoded secrets, SQL/NoSQL injection, auth bypass, XSS/CSRF, input validation, rate limiting, error leakage, and dependency vulnerabilities based on modified file scope.

Automate security checks for modified API endpoints by enforcing scope detection on code changes, triggering stepwise checklist execution and code scanning commands to validate input handling, rate limiting, and authorization.

You can block code merges based on security findings by enforcing clear blocking rules that require fixes for standardized, severity-based reports of critical vulnerabilities discovered during the code review.

Scope-based security checking works for infrastructure configuration changes by determining applicable checks based on modified files, ensuring any change touching configuration or infrastructure undergoes targeted vulnerability scanning.