General Security Audit

This skill provides a comprehensive workflow for identifying security vulnerabilities in the codebase using industry-standard tools.

Prerequisites

Before starting the audit, ensure the following tools are installed:

• trivy (Container and filesystem vulnerability scanner)
• osv-scanner (Google's vulnerability scanner for open-source dependencies)
• trunk (Integrated security and linting platform)

Tool Installation

If any tools are missing, install them using the following commands. If Homebrew (brew) is available, it is the recommended method.

Using Homebrew (macOS/Linux):