vulnerability-scanning - Automated security scanning for dependencies, code, and containers
Scan code, dependencies, and containers for security vulnerabilities using tools like Trivy, Snyk, and npm audit
Tags
Updated: 2026-02-11Capabilities
Typical Inputs
Typical Outputs
What this skill does
- run npm audit scan
- execute Snyk security test
- perform Trivy container scan
- run Bandit code analysis
- check Python safety
- scan filesystem vulnerabilities
- generate SBOM reports
Inputs
- code repository
- container images
- package manifests
- dependencies
- Dockerfiles
- CI/CD environment
- security tool configurations
- API keys
Outputs
- vulnerability reports
- security alerts
- compliance status
- SBOM documents
- scan logs
- CVE details
- severity assessments
Requirements
- Node.js/npm environment
- Docker runtime
- Python runtime for Bandit
- Snyk CLI
- Trivy scanner
- GitHub Actions