Sécuritésource GitHub
Scan de sécurité local
/security-scanEffectuer un contrôle de sécurité local et envoyer le flux de travail de l'audit de sécurité.
// contenu du skill
description: Perform local security scanning and dispatch the security audit workflow.
Local Scan
- Install tooling (first run):
pip install safety==3.2.4andbrew install gitleaks(orgo install github.com/zricethezav/gitleaks/v8@latest). - Detect secrets:
gitleaks detect --verbose --redact - Dependency audit (if
requirements*.txtexists):
bash
for f in $(ls **/requirements*.txt 2>/dev/null); do
safety check --full-report --file "$f"
done- Document results in the commit template.
Trigger Remote Audit
bash
gh workflow run security-audit.yml --ref $(git branch --show-current)
gh run watch --workflow "Security Audit (Claude)"Completion
- Ensure both local and remote scans are clean before pushing or merging.
// source originale publique
alirezarezvani/claude-code-skill-factory/.claude/commands/security-scan.md
Licence : MIT License
Projet indépendant, non affilié à Anthropic. Ce skill reste la propriété de son auteur original.
