Audit JavaScript/TypeScript repositories for secrets and OWASP Top 10 vulnerabilities.
npx skills add https://github.com/tartinerlabs/skills --skill security-tartinerlabs
Please help me install this Agent Skill. Skill: security Source: https://github.com/tartinerlabs/skills/tree/main/skills/security Command: npx skills add https://github.com/tartinerlabs/skills --skill security-tartinerlabs
Auditing software projects for security vulnerabilities, sensitive data exposure, and insecure dependencies by combining OWASP Top 10 checks with GitLeaks.
Run the security audit workflow on your project to identify secrets, vulnerabilities, and insecure dependencies.
High-intent search queries and answers about installing and using this skill.
Scanning JavaScript code for hardcoded secrets and OWASP Top 10 vulnerabilities involves integrating GitLeaks and rule-driven checks into your repository. This process identifies insecure dependencies and secret exposure, generating a structured remediation report.
Yes, you can automate security audits in your CI pipeline using GitLeaks. By integrating pre-commit hooks and CI workflow checks, the audit enforces secure coding practices across JavaScript and TypeScript projects during PR reviews.
Detecting sensitive data exposure in a TypeScript repository is best achieved through automated secret detection and dependency checks. Running a security audit scans configurations and code for hardcoded secrets, outputting a structured remediation report.
Yes, GitLeaks is a required dependency for running this repository security audit. You also need pre-commit hook setup and specific rule files under the rules/ directory to properly execute the OWASP Top 10 and secret detection checks.
Yes, this security audit supports multi-repo governance for CI pipelines. It enables repeated security audits across multiple repositories by integrating seamlessly into CI workflows and pull request reviews to enforce secure coding practices.
Auditing insecure dependencies with rule files requires proper configuration under the rules/ directory. The audit is currently applicable to JavaScript and TypeScript projects, and relies on GitLeaks and pre-commit hooks to function correctly.
Camilo8902Detect leaked credentials in code repositories with Gitleaks, detect-secrets, and TruffleHog.
SensLiaoAutomate static code analysis and security scanning on pull requests or CI pipelines.
spallempatiIntegrate SAST tools into CI/CD to block pull requests with high-severity findings.
nikhillinitDetect security vulnerabilities, secrets, and misconfigurations in codebases.
