Security Orb

An orb to facilitate security work within Studion CircleCI pipelines. Inspired by ASH.
Key features:

• Audit dependencies for vulnerabilities, supports npm or pnpm
• The default value of the package manager is picked from the environment
• Detect secret leaks on the changeset or target a directory
• Run a diff-aware static analysis tool to detect vulnerabilities
• Opt for a full scan of the codebase when needed
• Scan Dockerfiles for configuration issues

Usage

See the official registry page of this orb for guidelines and examples.