wa:validate-security

You can scan code for hard-coded secrets before deployment by running an automated validation workflow that triggers a secret-check primitive to detect sensitive data in code and config, returning CRITICAL findings with remediation guidance.

An AI vulnerability assessment for CI/CD pipelines is an automated review process that detects injection, auth issues, and sensitive data exposure in application changes, complementing traditional dependency audits to catch security weaknesses early.

To run a dependency audit in a PR validation workflow, execute npm or Python dependency audit tooling during stage-based execution to identify vulnerable packages across supported language stacks before merging changes.

Yes, automated security review works with Python and npm dependencies by executing built-in vulnerability assessments and language-specific dependency audit tooling to detect vulnerable packages across supported language stacks.

You can adjust security scanning strictness to reduce false positives by selecting lite, conditional, or strict rigor modes to balance coverage and noise during your CI and PR validation workflows.

A security review should block deployment in CI/CD when CRITICAL issues are present, with the aggregated action-ready security report recommending deployment blocking based on the severity of detected secrets, vulnerabilities, and dependency issues.