clowlove Security Scan
Comprehensive security scanning and vulnerability detection.
Features
- 🔍 Code Scan — Static analysis for security issues
- 📦 Dependency Scan — Check for vulnerable packages
- 🌐 Infrastructure Scan — Cloud/Docker security
- 🔑 Secret Scan — Detect exposed credentials
- 📊 Compliance — SOC2, HIPAA, GDPR checks
Usage
Scan Project
# Full scan
hermes security scan /path/to/project
# Fast scan
hermes security scan /path/to/project --mode fast
# Specific checks
hermes security scan --checks secrets,vulns,configs
Dependency Scan
# Scan dependencies
hermes security deps --file package-lock.json
# Python packages
hermes security deps --file requirements.txt
# Docker images
hermes security scan-image node:18-alpine
Secret Detection
# Scan for secrets
hermes security secrets --path ./src/
# Git history
hermes security secrets --git-history
Report
# Generate report
hermes security report --format html --output security-report.html
# Severity filter
hermes security report --severity critical,high
Configuration
# security-config.yml
scan:
exclude: ["node_modules", ".git", "test/**"]
severity_threshold: medium
secrets:
patterns:
- "api[_-]?key"
- "password"
- "secret"
dependencies:
ignore: ["dev-only-pkg"]
Pitfalls
- False Positives — Always verify reported issues
- Performance — Full scans can be slow on large codebases
- Credentials — Don't commit API keys to scanner