Results for “github-secret-scanning”

Reviews and hardens GitHub Actions workflows against injection, privilege escalation, supply-chain, and token-scoping risks that pattern matchers miss.

Configure and run CodeQL code scanning through GitHub Actions workflows or the standalone CLI for security analysis.

Scans agent skills for security issues including prompt injection, malicious scripts, excessive permissions, secret exposure, and supply chain risks.

Collects GitHub PRs, Notion docs, and Linear tickets from the past year, groups them into projects, and creates a private Notion document summarizing the work.

Scans codebases for security vulnerabilities by reasoning about code context, data flow, and component interactions, covering injection flaws, secrets exposure, authentication issues, and weak cryptography across multiple languages.

Fetch unread GitHub notifications for open PRs where review is requested from a specified team or opened by a team member.