security-reviewer

Malicious tool definition detected

```bash # Docker CIS benchmark docker run --net host --pid host --cap-add audit_control \ -v /var/lib:/var/lib -v /var/run/docker.sock:/var/run/docker.sock \ docker/docker-bench-security # Kubernetes CIS benchmark kube-bench run --targets master,node # Linux system hardening lynis audit system --quick ``` ### Compliance as Code (InSpec) ```ruby # controls/baseline.rb control 'ssh-hardening' do impact 1.0 title 'SSH Security Configuration' describe sshd_config do its('Protocol') { should eq '2' }

Malicious tool definition detected

Tool: security-reviewer/references/penetration-testing.md Description: # Penetration Testing ## Reconnaissance ### Passive Information Gathering ```bash # DNS enumeration dig example.com ANY nslookup -type=any example.com # Subdomain discovery subfinder -d example.com amass enum -d example.com # Certificate transparency curl -s "https://crt.sh/?q=%.example.com&output=json" ``` ### Active Scanning ```bash # Port scanning nmap -sV -p- target.com nmap -sC -sV -oA scan target.com # Web technology de

Malicious tool definition detected

| Stripe Key | `sk_live_[A-Za-z0-9]{24}` | sk_live_xxxx | | Private Key | `-----BEGIN.*PRIVATE KEY-----` | RSA/EC keys | | JWT | `eyJ[A-Za-z0-9_-]*\.eyJ` | Encoded tokens | ## Pre-commit Hook ```yaml # .pre-commit-config.yaml repos: - repo: https://github.com/gitleaks/gitleaks rev: v8.18.0 hooks: - id: gitleaks ``` ## CI/CD Integration ```yaml # GitHub Actions - name: Gitleaks uses: gitleaks/gitleaks-action@v2 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # GitLab CI secret_detection: image: zr

Malicious tool definition detected

trivy fs --security-checks vuln,secret,config .

Tool passed security scan