security-scanning-suite

SAST, dependency scanning, and secret detection are automated security scans that identify vulnerabilities in source code, dependencies, and exposed credentials. This Skill orchestrates all three across multi-language codebases, running tools like Semgrep, pip-audit, npm audit, and secret detection in a single workflow to generate a consolidated remediation plan before code reaches production.

Yes. This Skill includes container and IaC analysis alongside SAST and dependency checks. It runs comprehensive security scans on container images and infrastructure definitions using tools like Trivy, producing prioritized vulnerability reports and remediation guidance across your entire tech stack.

Automate security scanning by integrating this Skill into your CI/CD pipeline to run SAST, dependency checks, secret detection, and container scans on every build. It generates reproducible reports, tracks CVEs, and produces prioritized remediation workflows, eliminating manual security analysis and preventing issues from reaching production.

Yes. This Skill applies to multi-language codebases, supporting SAST across different languages through tool orchestration. It runs language-agnostic dependency and secret scanning alongside language-specific static analysis to provide unified security coverage regardless of your tech stack.

This Skill generates consolidated security reports and compliance guidance from SAST, dependency, secret, and container scans. It produces prioritized remediation plans with CVE tracking and actionable guidance, satisfying cross-tool orchestration and common reporting format requirements for compliance workflows.

When vulnerabilities are detected across SAST, dependencies, secrets, or containers, this Skill generates prioritized remediation guidance alongside the findings. It tracks CVEs and produces actionable remediation workflows, helping teams understand risk severity and prioritize fixes before deployment.