Coding & productReviewed listing
Dependency & Secret Audit
PurposePaste a GitHub repo, get a ranked fix list in 2 minutes: vulnerable packages with exact upgrade commands, leaked keys masked with rotate steps. Read-only; nightly alerts only on new issues.
At a glance
Read from the bot’s description. Not tested.
- Works with
- GitHub
- Runs
- When something happens
- What it can touch
- Drafts for your approval
- Setup
- Connect GitHub
The description says it drafts and waits for your OK, or never sends on its own.
1What you’ll need
- A Bot account, or the Bot app on your phone
- Your GitHub account, which the description mentions
From the bot’s share page and description.
Avoid sharing passwords, keys or private personal data.
2Set it up
Summary from the bot’s share page:
- Open Dependency & Secret Audit’s share page with Open in Bot, or on a phone with the app, tap Add to Bot app.
- Add Dependency & Secret Audit in Bot.
- Start a chat with Dependency & Secret Audit, then review what it produces and check any factual claims.
The creator’s post on X may have more detail.
3Use it
Shared by Thuong P. Nguyen. Open it in Bot to start using it.