Find security flaws before your app goes live.
What it does
Identifies security vulnerabilities in applications, dependencies, and infrastructure through automated scans and security assessments.
When to use it
Use for pre-deployment checks, continuous security monitoring, compliance audits, dependency checks, container scanning, and infrastructure assessments.
How to use it
Give it a project to scan; it produces a security report with findings and severity counts.
What you provide
- An existing project
Good to know
- may misreport its own work
What you need · 4
The JavaScript quick-start scanner uses Node.js built-in modules.
The quick-start scanner's full implementation calls ESLint with the security plugin.
The quick-start scanner's full implementation requires hadolint to scan the Dockerfile.
The quick-start scanner's full implementation requires trufflehog for filesystem secret scanning.
Access · 0
No additional actions listed.