Skills DirectorySearch all skills ↗

AI agent skill · by @bobmatnyc

Security Scanning

CI security scanning: secrets, deps, SAST, triage, expiring exceptions

SecurityAI Ml
Open in directoryView original source ↗

Archived 2026-10-23 · Source updated 2026-08-31 · License: MIT. Check the original repository for the latest version.

SKILL.md instructions

# Security Scanning

## Quick Start

- Secrets: fail fast; rotate on exposure.
- Dependencies: gate critical/high; automate updates.
- SAST: start high-signal; ratchet over time.
- Exceptions: require reason, owner, and expiry.

## Load Next (References)

- `references/tooling-matrix.md`
- `references/ci-workflows.md`
- `references/triage-and-remediation.md`
- `references/common-findings-and-fixes.md`
- `references/supply-chain-and-sbom.md`

Related skills