Analyze Go code for security vulnerabilities using gosec and govulncheck.
npx skills add https://github.com/oioio-space/unpixel --skill vuln-guard
Please help me install this Agent Skill. Skill: vuln-guard Source: https://github.com/oioio-space/unpixel/tree/main/.claude/skills/vuln-guard Command: npx skills add https://github.com/oioio-space/unpixel --skill vuln-guard
This Skill assists in identifying security vulnerabilities in Go code during the development process, preventing potential security issues from being committed to the repository.
gosec and govulncheck to scan code for common security vulnerabilities.syft and grype for dependency and CycloneDX SBOM analysis.Run unpixel vuln-guard to perform a security scan on your Go code.
High-intent search queries and answers about installing and using this skill.
Detect security vulnerabilities in Go code by integrating automated tools like `gosec` and `govulncheck` into pre-commit hooks to scan for common issues before they reach the repository.
Generate a CycloneDX SBOM and scan Go dependencies by integrating `syft` and `grype` into your CI pipelines, enabling continuous dependency analysis and vulnerability detection during development.
AI-assisted manual review helps catch logic-level security issues in Go by providing a pre-commit checklist that complements automated scanning to identify vulnerabilities automated tools might miss.
Automate continuous security scanning for Go code by combining `gosec` and `govulncheck` in pre-commit hooks with `syft` and `grype` in CI pipelines to catch issues early in the development cycle.
You need pre-commit hooks configured for your Go project to run vulnerability detection tools locally before committing, ensuring continuous scanning and preventing security issues from entering the repository.
mvillmowDetect security vulnerabilities and hardcoded secrets in code.
NVIDIAGenerate CycloneDX SBOMs with Syft, resolve licenses, and export CSV reports.
PriyanshKuniyalConfigures and manages SAST tools for automated vulnerability detection in CI/CD pipelines.
JosiahSiegelIntegrate Microsoft Defender for DevOps into Azure Pipelines for automated security scanning.