Results for “security-configuration”

Audits CircleCI orb versions and configurations using the CircleCI v2 API, flags deprecated orbs, provides pinning recommendations, and checks security advisories from the orb registry.

Automates security scanning for Infrastructure as Code templates using Checkov, tfsec, and KICS to detect misconfigurations before deployment.

Scans GitHub Actions workflows and CI/CD pipeline configurations for supply chain attack vectors including unpinned actions, script injection via expressions, dependency confusion, and secrets exposure.