System for automated security auditing and credential protection.

Core Workflows

Scope Limitation: Avoid scanning system-level directories. Focus only on relevant project workspaces.
Credential Isolation: Hardcoded secrets are considered a high-severity finding.
Dependencies: Container scanning requires trivy to be installed on the host system.

Scan specific project directories for hardcoded credentials.

Tool: scripts/scan_secrets.py
Usage: python3 $WORKSPACE/skills/security-guardian/scripts/scan_secrets.py <path_to_project>
Workflow:
1. Execute scan on a specific project or directory.
2. If findings are reported (exit code 1):
  - Review the file and line number.
  - Transition: Move the secret to a secure vault (e.g., using the mema-vault skill).
  - Redact: Replace the plaintext secret in the source code with an environment variable or a vault lookup call.

Analyze Docker images for vulnerabilities prior to deployment.

System for automated security auditing and credential protection.

Scan specific project directories for hardcoded credentials.

Tool: scripts/scan_secrets.py
Usage: python3 $WORKSPACE/skills/security-guardian/scripts/scan_secrets.py <path_to_project>
Workflow:
1. Execute scan on a specific project or directory.
2. If findings are reported (exit code 1):
  - Review the file and line number.
  - Transition: Move the secret to a secure vault (e.g., using the mema-vault skill).
  - Redact: Replace the plaintext secret in the source code with an environment variable or a vault lookup call.

Analyze Docker images for vulnerabilities prior to deployment.

Security Guardian