code-security git:20261007.fbd724aA

Immutable. This exact content never changes and is served at /api/v1/blob/bd454403b4f414cf.

---
name: code-security
description: "Review code security; scan secrets and vulnerabilities with Gitleaks and Trivy."
license: MIT
metadata:
  kind: task
  author: Médéric HURIER (Fmind)
  source: github.com/fmind/dot/tree/main/skills/code-security
  created: "2026-07-04"
  updated: "2026-10-07"
---

# Code Security

Investigate and fix security defects with evidence. Choose code review, secret scanning, or vulnerability scanning from the task; findings need verification and scanners do not replace reasoning. The name deliberately avoids `security-review`, which Claude Code and Copilot CLI ship as a built-in command.

## Workflow

Read only the matching guide and its required resources. Use a known guide directly when shared prerequisites are not needed.

## Task guides

<!-- guides:start -->

- [code-review](references/code-review/GUIDE.md): Assess code and repository security; verify findings and repairs.
- [gitleaks](references/gitleaks.md): Scan the working tree and history for secrets; handle confirmed exposure.
- [trivy](references/trivy/GUIDE.md): Scan dependencies, IaC, images, and licenses; generate SBOMs.

<!-- guides:end -->