Security Testing

Purpose: Identify and remediate security vulnerabilities before they reach production. Scope: SAST, DAST, SCA (dependency scanning), secrets detection, container scanning, OWASP Top 10 validation.

When to Use This Skill

• Running static analysis for security vulnerabilities (SAST)
• Scanning running applications for exploitable flaws (DAST)
• Auditing dependencies for known CVEs (SCA)
• Detecting hardcoded secrets, tokens, and credentials
• Scanning container images for vulnerabilities
• Validating OWASP Top 10 compliance
• Pre-release security verification

When NOT to Use