Security Scan Assistant | 安全掃描助手

Automate security scanning for dependencies, secrets, and license compliance.

自動化相依套件、機密資訊和授權合規的安全掃描。

Scan Types | 掃描類型

Type	Tool Examples	Purpose	用途
Dependency audit	npm audit, pip-audit, Snyk	Find known CVEs in dependencies	檢測相依套件已知 CVE
Secret detection	gitleaks, trufflehog	Find leaked credentials in code	偵測程式碼中洩漏的憑證
License compliance	license-checker, SPDX	Verify OSS license compatibility	驗證開源授權相容性
SAST	Semgrep, CodeQL	Static analysis for code patterns	靜態分析程式碼模式

Tool	Command	Scope	範圍

Related skills