Security-Scan: Self-Hosted Security Scanning

Orchestrate comprehensive security scanning using self-hosted tools.

Features

1. SAST (Static Application Security Testing)

   • Semgrep: Multi-language pattern matching
   • Bandit: Python-specific security linting

2. Dependency Audit

   • pip-audit: Python package vulnerabilities
   • npm audit: Node.js package vulnerabilities (auto-detected)
   • Trivy: Container and filesystem scanning

3. Secrets Detection

   • gitleaks: Find hardcoded credentials, API keys, tokens