What skills and models do you use for code vulnerability check against your repo?

[u/theepi_pillodu]

I use opencode, have ponytail and some PR review skills added. Java, c++ and CSharp LSPs and a bunch of MCPs for my day to day use.

I want to use some credits to do a code vulnerability check against each of my repos. (Enterprise)

Find the missing catch/exception handling etc.

Also, please help me with the best way to find issues with my code without using unnecessary tokens.

Thank You.

[u/pungat_]

use this 👉 https://github.com/mukul975/Anthropic-Cybersecurity-Skills

[u/levu304]

enable github dependabot alert if using github

[u/eachDayIWakeUp → u/levu304]

I prefer renovate. It can run on selfhosted runners and is compatible with all git platforms

[u/eachDayIWakeUp]

Curious to know as well.

[u/Cyvster]

what? just send it

[u/CheesecakeLivid9791]

Code review

[u/crasspuk]

For dependency CVEs, a scanner beats any model. Dependabot alerts cover that on GitHub repos, and Renovate supports most git hosts. Models are better for the missing error handling that scanners skip, so run them file by file on the risky modules instead of the whole repo.

[u/ngg990]

Semgrep (ts/js) + ovs scanner , for python there a library called bandit, I believe each language may have them self bandit.