Safety
Secrets, vulnerable dependencies and risky CI config, checked on every change.
Rule 24 says guardrails fire on every change. An agent adds dependencies faster than anyone reads them, and it will paste a key into a test file without blinking. Scanners catch most of that before merge. Keep an eye on the scanners too. In March 2026 Trivy's own release and GitHub Action were hijacked for a few hours, which is a good reason to pin every Action to a commit.
Show tools for
28 tools
Security and supply chain
Start here
Bandit
Scans Python source for common security mistakes.
Flags eval and shell=True, the shortcuts agents take when asked to just make something work.
Start here
Brakeman
A static scanner that finds security holes in Rails apps.
It reads Rails conventions directly, so it flags the unsafe params and SQL an agent might write.
Uses its own public use license with limits on commercial reuse. Brakeman Pro is the paid version.
Start here
cargo-audit
Checks Cargo.lock against the RustSec advisory database.
A fast advisory check for every crate an agent adds.
Start here
Checkov
Scans infrastructure-as-code for misconfigurations against hundreds of policies.
Stops an agent's Terraform from opening a bucket or port to the world.
Owned by Prisma Cloud from Palo Alto, which sells a paid platform.
Start here
gitleaks
Scans git history and working trees for committed secrets.
Agents paste keys from environment files into code, and this fails the commit before it ships.
Start here
govulncheck
The Go team's tool that reports only vulnerabilities your code actually calls.
Reachability analysis cuts false alarms, so a failure deserves an agent's attention.
Start here
npm audit
Built-in npm command that reports known vulnerabilities in installed dependencies.
A zero-setup check that fails CI when an agent adds a package with a known advisory.
Start here
OSV-Scanner
Scans lockfiles across many ecosystems against the OSV vulnerability database.
One scanner and one database cover every stack in a polyglot repo, and it can suggest fixes.
Start here
zizmor
Static analysis for GitHub Actions workflows that finds injection and permission problems.
Agents edit workflows constantly, and zizmor catches template injection and over-broad tokens.
-
bundler-audit
Checks Gemfile.lock against known vulnerable gem versions.
A fast gate against outdated gems with published advisories, whether an agent added them or a human did.
-
Claude Code security review
GitHub Action that scans pull request diffs for security flaws using Claude.
Every diff gets a security pass with no human security reviewer in the loop.
-
Dependabot
GitHub's service that opens pull requests for dependency updates and security fixes.
Bounded update PRs can land without a human when a green-merge pipeline backs them.
-
detect-secrets
Yelp's baseline-driven secret detector for pre-commit.
A baseline file lets a team adopt it on an old repo and fail only on new secrets.
-
Gitleaks Action and TruffleHog pre-commit
GitHub Action wrapper for gitleaks on pull requests.
Secret scanning runs on each agent PR in CI.
The Action needs a paid license for organization repos. The gitleaks CLI is MIT.
-
gosec
Scans Go source for security problems.
Catches hardcoded credentials and weak crypto in Go code, and runs inside golangci-lint.
-
Grype
Vulnerability scanner for container images and filesystems.
It pairs with Syft SBOMs for a scan that has no registry dependency.
-
GuardDog
Scans PyPI, npm and other packages for malicious behavior using Semgrep rules and metadata heuristics.
A new dependency gets screened for malware before an agent installs it.
-
KICS
Finds IaC misconfigurations with queries written in Rego.
Custom Rego queries let a team turn its own infrastructure rules into failing checks.
-
OpenSSF Scorecard
Scores a project's security practices such as pinned dependencies and branch protection.
Run it on your own repo and on dependencies before an agent adopts them.
-
pip-audit
Audits Python environments and requirements files against known vulnerabilities.
The PyPA-backed default for checking packages an agent pulled in.
-
Sigstore cosign
Signs and verifies container images and artifacts with keyless identities.
Signed artifacts let a merge pipeline prove who built what.
-
SLSA GitHub generators
Produces SLSA build provenance for artifacts built in GitHub Actions.
Provenance records show that an artifact came from the reviewed commit.
GitHub also offers artifact attestations natively.
-
Snyk
Commercial scanner for dependencies, code, containers and IaC.
A large vulnerability database and automatic fix pull requests, plus integrations aimed at coding agents.
Has a limited free tier. The CLI is Apache-2.0.
-
Socket
Analyzes package behavior to flag malware, typosquats and risky install scripts before install.
Finds malicious packages that have no CVE yet, which is how new slopsquatting attacks arrive.
Has a free tier.
-
Syft
Generates software bills of materials from images and directories.
An SBOM per build records what an agent's change added to the dependency tree.
-
tfsec
Terraform security scanner, now folded into Trivy.
Listed so teams still running it know to move to Trivy or Checkov.
Aqua merged tfsec into Trivy and put it in maintenance mode. Trivy is the successor.
-
Trivy
Scans containers, dependencies, IaC and secrets for vulnerabilities and misconfigurations.
One tool covers image, lockfile and Terraform checks, and it replaces tfsec.
Its release, its GitHub Action and its Docker images were compromised in March 2026 (GHSA-69fq-xp46-6x23). Pin Actions to a commit SHA.
-
TruffleHog
Finds secrets and checks whether they are still live.
Verification cuts noise, so a failure means a real exposed credential.
Licensed AGPL-3.0, with a paid enterprise product.
Nothing in this section is built for the stacks you picked, and nothing here works with any language. Pick another stack, or .
Missing a tool that belongs here? Suggest it.
Every tool here was checked against its GitHub repository or its own site on 6 October 2026. Stars and dates come from GitHub on that day.