security-scan

Run a security audit on staged git changes by executing a Python script that parses git diffs to detect leaked secrets and vulnerabilities. The scanner integrates directly with the git workflow and respects .gitignore and .dockerignore rules.

A pre-commit security scan detects leaked secrets, forbidden files, ignore coverage gaps, injection vulnerabilities, and XSS. It also provides a manual diff review checklist to identify RBAC flaws and authentication issues.

Yes, you need Python 3 installed to scan pending git changes for leaked secrets. The security audit script relies on Python 3 and its standard libraries for parsing git diffs and scanning local files without external dependencies.

Yes, automated vulnerability detection works with .gitignore and .dockerignore rules. The scanner integrates these ignore configurations to automatically exclude specified files and directories from security audits.

The best way to review code diffs for SQL injection and XSS flaws is using a manual diff review guide. This provides a targeted security checklist to systematically inspect pending git changes for injection vulnerabilities and RBAC issues.

Use an automated security audit for pre-commit hooks to consistently detect leaked secrets and injection vulnerabilities before pushing code. It provides detailed findings for manual review, reducing human error compared to checking diffs manually.