SecOpsAgentKit

SecOpsAgentKit is a security operations toolkit for AI coding agents. It provides Claude Code 25+ skills to catch vulnerabilities, scan containers, detect secrets, and enforce policies automatically. Benefits security teams and developers by integrating security checks into the coding workflow.

[{"step":1,"action":"Install SecOpsAgentKit tools in your project environment. For Claude Code users: `pip install secops-agent-kit` and configure API keys for your scanners (Trivy, Grype, Gitleaks, etc.). For Docker users: `docker pull secops/agentkit:latest`.","tip":"Ensure your scanner tools are updated to their latest versions to avoid false negatives. Use `secops-agent-kit update-scanners` to synchronize versions."},{"step":2,"action":"Run the full security scan suite using the provided prompt template. Replace [PLACEHOLDERS] with your project paths, image names, and policy requirements. Example: `secops-agent-kit scan --project /workspace/my-app --image my-app:latest --policies owasp-top10`.","tip":"For large projects, run scans incrementally (e.g., SCA first, then container scan) to manage resource usage. Use `--severity critical,high` to focus on high-risk items."},{"step":3,"action":"Review the generated report in the console output or export to JSON/HTML for documentation. Use `secops-agent-kit report --format html --output security-report.html` to generate a shareable report.","tip":"Prioritize remediation based on the risk score and CVSS ratings. Focus on critical vulnerabilities first, then address high-severity findings within 24-48 hours."},{"step":4,"action":"Integrate SecOpsAgentKit into your CI/CD pipeline. Add a step in your GitHub Actions, GitLab CI, or Jenkins pipeline to run `secops-agent-kit scan` on every push to main. Fail the build on critical vulnerabilities.","tip":"Use `--fail-on critical` flag in CI to enforce security gates. Example: `secops-agent-kit scan --project . --fail-on critical,high`."},{"step":5,"action":"Set up automated policy enforcement. Use `secops-agent-kit enforce --policy no-secrets --directory src/` to block commits containing secrets. Configure pre-commit hooks to run before pushes.","tip":"Customize policies by creating a `.secops-policies.yaml` file in your project root. Example: `policies: no-hardcoded-api-keys: pattern: 'apiKey\\s*=\\s*[\"\\'].*[\"\\']'`"}]