vulnerability-scanner

To scan code for hardcoded secrets and vulnerable dependencies, run the Python-based scanner against your project directory to detect API keys and execute npm audit when package.json is present.

A codebase vulnerability scanner detects hardcoded secrets, vulnerable or outdated packages, dangerous code patterns like eval, and insecure configuration settings across diverse project ecosystems.

You can run a security scan for specific risk types by passing the --scan-type flag with arguments like all, deps, secrets, patterns, or config to target specific vulnerabilities.

The vulnerability scanner works with both Node and Python projects, executing npm dependency audits when package.json exists and scanning code patterns and configurations across diverse project ecosystems.

To automate risk detection during CI workflows, execute a Python scanner script that outputs JSON results, enabling automated dependency auditing, secret detection, and configuration verification.

To identify dangerous code patterns like unsafe deserialization, run a security scan with the patterns scan type, which actively flags risky code structures within your codebase.