接続

CI Security Scanning with Strix

wedabrobywedabro
•
2
•
セキュリティとテスト

Integrates automated, diff-scoped AI security scanning and pentesting into CI/CD pipelines to block vulnerable code before merge.

CI Security Scanning with Strix integrates intelligent, diff-scoped automated pentesting and security audits directly into your CI/CD pipelines, including GitHub Actions, GitLab CI, and Bitbucket. It enables automated pull request reviews that detect and validate security vulnerabilities before code merges, providing actionable feedback via PR comments and SARIF 2.1.0 exports. This skill supports both self-hosted runner execution via an open-source CLI with your own LLM keys, and zero-maintenance managed cloud scanning via app.strix.ai, making it ideal for teams seeking automated pre-merge security gates without manual security review overhead.

主な機能

01SARIF 2.1.0 report generation compatible with GitHub Code Scanning and security dashboards
02Deterministic exit codes to fail CI/CD builds on validated high-severity vulnerabilities
03Diff-scoped security scans focused specifically on changed files in pull requests
04Automated PR comments with detailed vulnerability context and remediation insights
052 GitHub stars
06Dual deployment models: self-hosted open-source CLI runner or zero-config managed cloud app

ユースケース

01Blocking pull requests containing exploitable vulnerabilities in GitHub Actions or GitLab CI pipelines
02Running automated, air-gapped AI pentesting in self-hosted enterprise CI runners
03Exporting standardized SARIF 2.1.0 security reports to GitHub Advanced Security dashboards