security-scanner

Security scanning identifies vulnerabilities, exposed secrets, and misconfigurations by analyzing code, dependencies, containers, and infrastructure as code. Run the scanner on your repository to receive structured findings with severity levels, locations, CWE references, and remediation guidance across SAST, OWASP Top 10, and dependency checks.

Yes. The scanner integrates into pre-commit checks and pull-request workflows to catch security issues before they reach production. Execute it as part of your CI/CD pipeline to validate code, dependencies, containers, and IaC against security standards automatically.

The scanner implements SAST for code vulnerabilities, detects exposed secrets and credentials, validates against OWASP Top 10, checks container security configurations, scans infrastructure as code for misconfigurations, and analyzes dependencies for known vulnerabilities with CWE references.

Execute the pre-commit security scan using `python scripts/main.py --operation scan-all` to analyze your codebase. The scanner produces structured findings including vulnerability location, severity, remediation steps, confidence scores, and CWE references across all supported security domains.

Yes. The scanner validates IaC security and container configurations alongside traditional code analysis. It detects misconfigurations in infrastructure definitions and container images, producing findings with severity and remediation guidance for compliance validations and deployment reviews.

The scanner generates structured security findings that include vulnerability type, file location, severity level, remediation steps, CWE references, and optional confidence scores. Results support security audits, compliance validations, onboarding new repositories, and production deployment reviews.