Loading...
Loading...
Found 16 Skills
Research-backed code review skill with OWASP Top 10 security checks, SAST tool integration (SonarQube, CodeQL, Snyk), performance pattern detection, and automated quality standards enforcement. Auto-invoked for code review, security audit, PR analysis, and bug checking. Implements 2025 best practices with 92% faster vulnerability remediation.
Apply a security hardening baseline to a GitHub repository via gh api — branch and tag rulesets, Actions token defaults, secret scanning, Dependabot, private vulnerability reporting, CodeQL, immutable releases, and branch-restricted environments for deploy secrets. The write half of the pair with audit:security-audit, which finds the same gaps read-only.
Configure Static Application Security Testing (SAST) tools for automated vulnerability detection in application code. Use when setting up security scanning, implementing DevSecOps practices, or automating code vulnerability detection.
GitHub AI-powered security and automation features for 2025