Results for “scanning”

Coordinate multi-layer security scanning and hardening across application, infrastructure, and compliance controls.

The English summary is being prepared. Showing the original description.

Use when working with Semgrep — semgrep static application security testing (SAST). Covers code scanning, custom rule creation, CI integration, autofix capabilities, multi-language support, and vulnerability triage. Use when scanning source code for security vulnerabilities, creating custom detection rules, or integrating SAST into CI pipelines.

The English summary is being prepared. Showing the original description.

DevSecOps IA — Expert en intégration sécurité dans les pipelines CI/CD (SAST, DAST, SCA, container scanning, compliance automation)

The English summary is being prepared. Showing the original description.

Expert en DevSecOps avancé (SAST, DAST, SCA, container scanning, policy-as-code, GitGuardian, supply chain security, SBOM)

The English summary is being prepared. Showing the original description.

Expert en sécurité des conteneurs (Trivy, Snyk, image scanning, SBOM, runtime security, DZ)

The English summary is being prepared. Showing the original description.

Scan container images for known vulnerabilities using Anchore Grype with SBOM-based matching and configurable severity thresholds.

The English summary is being prepared. Showing the original description.

Integrate gitleaks and trufflehog into CI/CD pipelines to tespit etme
leaked secrets before Dağıt:ment

The English summary is being prepared. Showing the original description.

Trivy is a comprehensive open-source vulnerability scanner by Aqua Security that tespit etme (s) vulnerabilities in OS packages, language-specific dependencies, misconfigurations, secrets, and license violati

The English summary is being prepared. Showing the original description.

Configure GitHub Advanced Security with CodeQL to perform automated static analysis and vulnerability Tespit across repositories at enterprise scale.

The English summary is being prepared. Showing the original description.

Scan container images, filesystems, and Kubernetes manifests for vulnerabilities, misconfigurations, exposed secrets, and license compliance issues using Aqua Security Trivy with SBOM generation and CI/CD integration.

The English summary is being prepared. Showing the original description.

bu skill covers implementing Gitleaks for Tespit etme and preventing hardcoded secrets in git repositories. It addresses configuring pre-commit hooks, CI/CD pipeline integration, custom rule authoring for organization-specific secrets, baseline management for existing repositories, and remediation workflows for exposed credentials.

The English summary is being prepared. Showing the original description.

Securing container registry images by implementing vulnerability scanning with Trivy and Grype, enforcing image signing with Cosign and Sigstore, configuring registry access controls, and building CI/CD pipelines that prevent Dağıt:ing unscanned or unsigned images.

The English summary is being prepared. Showing the original description.

GitHub 公式ドキュメント (docs.github.com)。REST API, GraphQL, Webhooks, GitHub Apps, OAuth Apps, gh CLI, PAT / GITHUB_TOKEN, Actions (jobs, steps, expressions, workflow commands, concurrency, OIDC, artifact attestations, lockfile), pull requests, issues, Projects v2, immutable releases, Codespaces, Packages, Copilot API / cloud agent, code scanning, secret scanning, Dependabot, Dependency graph / SBOM, Teams, Billing, activity (events / notifications)。

The English summary is being prepared. Showing the original description.

Audit codebases, infrastructure, AND agentic AI systems for security issues. Covers traditional security (dependencies, secrets, OWASP web top 10, SSL/TLS, file permissions) PLUS agentic security (prompt injection scanning, identity spoofing detection, memory poisoning checks, multi-agent communication audit, OWASP Agentic Top 10). Use when scanning for vulnerabilities, detecting hardcoded secrets, reviewing agent workspace configuration, checking prompt injection vectors, or auditing agent permissions and boundaries.

The English summary is being prepared. Showing the original description.

Comprehensive guide for setting up and configuring CodeQL code scanning via GitHub Actions workflows and the CodeQL CLI. This skill should be used when users need help with code scanning configuration, CodeQL workflow files, CodeQL CLI commands, SARIF output, security analysis setup, or troubleshooting CodeQL analysis.

The English summary is being prepared. Showing the original description.

Detects leaked API keys, tokens, passwords, and credentials in code with pre-commit hooks, CI checks, scanning rules, and remediation procedures. Use for "secret scanning", "credential detection", "API key leaks", or "secret management".

The English summary is being prepared. Showing the original description.

Implement and review security measures in Quarkus applications. Covers sign-in, access permissions, input validation, password hashing, secret storage, request limits, audit logs, and checks for known vulnerabilities in dependencies, with implementation and configuration examples.

• Adding JWT or OIDC authentication to a Quarkus API
• Checking role permissions and resource ownership
• Reviewing input validation and database queries

Manage GitHub repository operations with the gh command-line tool. Classify issues, check pull request readiness, investigate failed automated checks, prepare releases and changelogs, and review dependency or exposed-secret security alerts.

• Classifying issues and finding duplicates
• Checking pull request reviews and merge readiness
• Investigating failed CI workflows

Extract unwritten coding conventions from an existing project and turn them into an AI style rules file. Resolve conflicting patterns with the user, identify example files, and update the rules as the codebase changes.

• Introducing an AI agent to a legacy codebase
• Documenting unwritten coding conventions
• Resolving conflicting naming and structural patterns

Audit Claude Code agents, skills, rules, and MCP tool configurations to estimate how much space they consume in the model's context. Identifies oversized and overlapping components, then ranks recommendations by potential token savings.

• Investigating why context space fills quickly
• Auditing a setup after adding skills or MCP servers
• Finding oversized files and duplicated instructions

Check a Django application before a pull request or deployment. Review its environment, code quality, database changes, tests, vulnerabilities, and configuration, then produce a phased pass/fail report identifying issues that need fixes.

• Checking a Django pull request
• Reviewing database migrations
• Checking test coverage targets

Check code changes before committing with security scans, tests, linting, and an independent agent review. Compare failures against the previous baseline, then use a separate agent to fix reported problems and repeat verification.

• Checking feature changes before a commit
• Scanning added code for secrets and injection risks
• Separating new test failures from existing failures

Tidy a Paperclip Mine inbox by scanning entries and grouping archive candidates by work status and inactivity. Present checkbox confirmations, then archive only accepted selections, with undo details and no changes to the underlying tasks, branches, or workspaces.

• Clear completed work from a Mine inbox
• Review inbox entries that have been inactive for a long time
• Check stale work that still has unmerged commits

Create a reusable snapshot of an existing code repository, covering files, imports, components, and routes. It gives agents a shared reference for migration and editing work without repeatedly scanning the directory tree.

• Prepare repository structure for a code migration
• Record components and routes before making changes
• Reuse a repository snapshot across agent turns