DevSecOps reviewers
Review a pasted diff, plan, or thread. Open the prompt in the assistant you already use.
Reviews pasted dependency manifests, lockfiles, and workflow changes for supply-chain risk. It does not query a registry or open a pull request.
Walks supplied code and infrastructure text for public exposure, wildcard identity, privileged containers, secret handling, and dependency risk. It does not connect to a cloud account.
Reviews a pasted IAM policy for wildcard actions, broad resources, and missing conditions. It does not call AWS or attach a policy.
Reviews pasted Kubernetes manifests for privilege, exposure, and missing guards. It does not talk to a cluster.
Reviews pasted Terraform, security groups, and bucket or load balancer config for unintended public access. It does not connect to AWS.
Reviews a pasted Terraform plan or diff for exposure, identity, and destructive changes. It does not run terraform or call a cloud API.
Reviews a pasted Linear ticket for security scope before someone builds it. It does not change the ticket or scan a repository.
Showing 1–7 of 7