skills.rest
williamzujkowski
williamzujkowskiCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-scanning

Automate review and fixing of CodeQL and secret scanning alerts.

18|1|Updated Jan 3, 2026
Search Tags:#security#vulnerability#CI/CD#incident response#codeql#secret scanning
One-click install
npx skills add https://github.com/williamzujkowski/nexus-agents --skill security-scanning-williamzujkowski
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scanning
Source: https://github.com/williamzujkowski/nexus-agents/tree/main/skills/security-scanning
Command: npx skills add https://github.com/williamzujkowski/nexus-agents --skill security-scanning-williamzujkowski

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill streamlines the process of reviewing and fixing security scanning alerts from CodeQL and secret scanning, reducing manual effort and preventing security risks.

Core Features & Use Cases

  • Alert Triage: Checks for open CodeQL and secret scanning alerts and categorizes their severity.
  • Automated Fixes: Applies vulnerability-specific code fixes for common security issues like insecure randomness or URL checks.
  • Incident Response: Assists in classifying secrets, rotating, revoking, and updating credentials to mitigate data breaches.
  • Reporting: Creates or updates tracking issues with analysis and remediation actions, streamlining security workflows.

Quick Start

Run this Skill to automatically review recent security alerts, classify them, and suggest or implement fixes.

Frequently Asked Questions about security-scanning

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate CodeQL alert triage and vulnerability remediation in CI/CD?▼

Automating CodeQL alert triage involves checking for open security alerts, categorizing severity, and applying vulnerability-specific code fixes for common issues like insecure randomness directly within your development workflows.

What is the best way to handle secret scanning alerts and incident response?▼

Handling secret scanning alerts requires classifying exposed secrets, rotating and revoking compromised credentials, and updating them to mitigate data breaches while creating tracking issues for incident reporting.

Do I need GitHub API knowledge to automate security alert fixes?▼

Yes, integrating automated security actions within development workflows requires knowledge of the GitHub API and security best practices to effectively review, triage, and fix CodeQL and secret detection alerts.

Can I automate incident reporting for security vulnerabilities and exposed secrets?▼

Automating incident reporting is done by creating or updating tracking issues with analysis and remediation actions, streamlining security workflows and ensuring compliance with security best practices.

What types of code fixes can be automatically applied for CodeQL security issues?▼

Automated vulnerability remediation applies specific code fixes for common security issues detected by CodeQL, such as resolving insecure randomness or fixing insecure URL checks to prevent vulnerabilities.

Related Skills

Explore More Legal & Compliance Skills→
gobifrostgobifrost
55

bifrost-secupdate

Automate triage and resolution of GitHub security artifacts for Bifrost.

Official
Advanced
u9401066u9401066
2

dependency-audit

Audit project dependencies for missing imports, vulnerabilities, licenses, and outdated packages.

Community
Advanced
arbazkhan971arbazkhan971
26

devsecops

Integrate security scanning into CI/CD pipelines with blocking gates.

Community
Advanced
froggugugugufroggugugugu

security-scan

Execute SCA, SAST, DAST, and secret detection scans to report vulnerabilities.

Community
Advanced