CaspianTools.caspian-security
Caspian Security
Activity
Extension trends
Manifest
Metadata
- Namespace
- CaspianTools
- Name
- caspian-security
- License
- MIT
- Homepage
- https://github.com/CaspianTools/caspian-security#readme
- Repository
- https://github.com/CaspianTools/caspian-security.git
- Reviews
- 0
Taxonomy
Categories
Description
Security scanner for VS Code AND a standalone `caspian` CLI you can run anywhere (PowerShell/cmd/bash, no VS Code needed) — 309 rules covering code, infrastructure (Dockerfile, Terraform, Kubernetes) and deploy config (open Firebase/Supabase rules, RLS off, client-exposed secrets, unmetered AI endpoints), intra-file taint tracking, SSRF/XXE/SSTI/deserialization/JWT/OAuth/LDAP, 29 provider-prefix secret detectors, git-history scanner, opt-in OSV.dev multi-ecosystem dependency check, AI fixes, agent-loop integration (Claude Code plugin with write-blocking hooks, security_scan_file/security_scan_changes/check_deployment_security MCP tools, `caspian init` for Cursor & others), reusable GitHub Action with SARIF upload, Open VSX release
Archive