skills.rest
saschadudkin-sketch
saschadudkin-sketchCOMMUNITY
Explore all skills by this author →
GitHub

semgrep-gitleaks-security-ci

Detect secrets and vulnerabilities in code repositories with semgrep and gitleaks.

Updated Mar 28, 2026
Search Tags:#security#CI/CD#vulnerability assessment#secret detection#code scanning
One-click install
npx skills add https://github.com/saschadudkin-sketch/rezidence4 --skill semgrep-gitleaks-security-ci
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: semgrep-gitleaks-security-ci
Source: https://github.com/saschadudkin-sketch/rezidence4/tree/main/.agents/skills/semgrep-gitleaks-security-ci
Command: npx skills add https://github.com/saschadudkin-sketch/rezidence4 --skill semgrep-gitleaks-security-ci

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires semgrep, gitleaks, and includes scripts (resource) components.

What problem does it solve?

This Skill automates the detection of secrets and vulnerabilities in your codebase, helping you maintain a secure environment.

Core Features & Use Cases

  • Secret Detection: Identifies and flags sensitive information like API keys, credentials, and connection strings.
  • Vulnerability Scanning: Checks for known security issues in your code.
  • Use Case: Before deploying a new feature, use this Skill to scan your code for any potential security risks.

Quick Start

Run the semgrep-gitleaks-security-ci skill to scan your codebase for secrets and vulnerabilities.

Frequently Asked Questions about semgrep-gitleaks-security-ci

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate secret detection in a CI/CD pipeline?▼

You can automate secret detection in a CI/CD pipeline by running this Skill to scan code repositories using gitleaks and semgrep, which identifies API keys and credentials before deployment.

What is the best way to scan a repository for API keys and vulnerabilities?▼

Scanning a repository for API keys and vulnerabilities is best handled by automated code scanning tools like semgrep and gitleaks, which flag sensitive information and known security issues in your codebase.

Can I use semgrep and gitleaks together for code scanning?▼

Yes, you can use semgrep and gitleaks together for code scanning; this Skill combines gitleaks for secret detection and semgrep for vulnerability assessment to secure your codebase.

How does automated vulnerability assessment work before deployment?▼

Automated vulnerability assessment before deployment works by integrating code scanning scripts into your CI/CD pipeline, checking your repository for sensitive data and known security issues.

Do I need to install semgrep and gitleaks to use this Skill?▼

Yes, you need to install both semgrep and gitleaks, as this Skill depends on these tools to perform secret detection and vulnerability assessment within your code repositories.

Related Skills

Explore More Software Engineering Skills→
ancolemanancoleman
503

managing-vulnerabilities

Automate multi-layer security scanning and SBOM generation in CI/CD pipelines.

Community
Advanced
eleva-labseleva-labs

security-audit

Plan security audits with checklists for dependency scanning and secret detection.

Official
Basic
Ryno-Crypto-Mining-ServicesRyno-Crypto-Mining-Services

devops-role-skill

Create CI/CD pipelines with GitHub Actions, Terraform, and Prometheus.

Official
Advanced
TECHKNOWMAD-LABSTECHKNOWMAD-LABS

security-audit

Scan code repositories for vulnerabilities and leaked secrets using static analysis tools.

Official
Advanced