Skip to main content
ClaudeWave
Slash Command17.9k estrellas del repoactualizado yesterday

security-scan

The security-scan command automates a pre-push security verification workflow by checking for accidentally committed secrets using gitleaks and scanning Python dependencies for known vulnerabilities using the safety tool. Use this before committing code to catch security issues early and ensure clean dependency audits are documented in commit messages.

Instalar en Claude Code
Copiar
mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/alirezarezvani/claude-skills/HEAD/.claude/commands/security-scan.md -o ~/.claude/commands/security-scan.md
Después abre una sesión nueva de Claude Code; el slash command carga automáticamente.

security-scan.md

1. Ensure dependencies are installed:
   ```bash
   pip install safety==3.2.4
   brew install gitleaks  # or appropriate package manager
   ```
2. Scan for committed secrets:
   ```bash
   gitleaks detect --verbose --redact
   ```
   - Resolve any findings before continuing.
3. Audit Python dependencies (if requirements files exist):
   ```bash
   for f in $(find . -name "requirements*.txt" 2>/dev/null); do
       safety check --full-report --file "$f"
   done
   ```
4. Record results in the commit template's Testing section.
5. After a clean pass, proceed with commit and push workflow.