source-audit

name	source-audit
description	Source code security audit — dependency vulnerabilities, secrets detection, config review, Dockerfile analysis.

Source Code Security Audit

Analyze application source code for security issues without requiring build/runtime access.

Scripts

Dependency Audit

bash scripts/dep-audit.sh <project-dir>
# Parses package.json/yarn.lock for known vulnerable patterns

Secrets Detection

bash scripts/secrets-scan.sh <project-dir>
# Scans for hardcoded secrets, API keys, tokens, passwords

Config Review

bash scripts/config-review.sh <project-dir>
# Reviews configuration files for security issues

Dockerfile Review

bash scripts/dockerfile-review.sh <dockerfile-path>
# Analyzes Dockerfile for security best practices