security-scan

Static Application Security Testing and Software Composition Analysis audits identify vulnerabilities in source code and dependencies. This skill executes multi-layered security scans to detect known exploits, misconfigurations, and provides severity levels with remediation guidance for secure releases.

Scanning for hardcoded secrets in source code and container images is automated through multi-layered security auditing. This skill analyzes codebases and containerized environments to detect sensitive credentials, vulnerable libraries, and common code injection flaws.

Integrating automated security scanning into GitHub Actions CI/CD pipelines is fully supported. This skill provides examples for seamless integration into CI/CD pipelines and pre-commit hooks to enforce continuous security assurance throughout the development lifecycle.

Software Composition Analysis identifies vulnerable dependencies by analyzing your project's libraries against known exploit databases. This skill categorizes discovered security flaws with severity levels and offers actionable remediation guidance to mitigate risks in your software supply chain.

Running pre-commit hooks for continuous security assurance requires integrating the skill into your existing development workflow. It provides examples for seamless integration into pre-commit hooks, ensuring scans for hardcoded secrets and vulnerabilities execute automatically before code changes are committed.