security-scanning
CI security scanning: secrets, deps, SAST, triage, expiring exceptions
$ 安裝
git clone https://github.com/bobmatnyc/terminator /tmp/terminator && cp -r /tmp/terminator/.claude/skills/universal-security-security-scanning ~/.claude/skills/terminator// tip: Run this command in your terminal to install the skill
SKILL.md
name: security-scanning description: "CI security scanning: secrets, deps, SAST, triage, expiring exceptions" version: 1.1.0 category: universal author: Claude MPM Team license: MIT progressive_disclosure: entry_point: summary: "Baseline CI scans (secrets, deps, SAST) with triage and expiring exceptions" tags: [security, scanning]
Security Scanning
Quick Start
- Secrets: fail fast; rotate on exposure.
- Dependencies: gate critical/high; automate updates.
- SAST: start high-signal; ratchet over time.
- Exceptions: require reason, owner, and expiry.
Load Next (References)
references/tooling-matrix.mdreferences/ci-workflows.mdreferences/triage-and-remediation.mdreferences/common-findings-and-fixes.mdreferences/supply-chain-and-sbom.md
Repository
bobmatnyc
Author
bobmatnyc/terminator/.claude/skills/universal-security-security-scanning
1
Stars
0
Forks
Updated4d ago
Added1w ago