A single Docker image (kpericak/ai-security-toolkit-1:0.2) that bundles three security scanning tools. Designed for AI agents to run as part of development workflows.

Bundled Tools

Tool	Purpose	Type
semgrep	Static analysis (SAST)	Code patterns
trivy	Vulnerability scanning (SCA)	Dependencies, containers, IaC
gitleaks	Secret detection	Git history

Usage

Mount the project directory as /workspace:

# Static analysis
docker run --rm -v "$(pwd):/workspace:ro" \
  kpericak/ai-security-toolkit-1:0.2 \
  -c "semgrep scan --config auto /workspace"

# Vulnerability scan
docker run --rm -v "$(pwd):/workspace:ro" \
  kpericak/ai-security-toolkit-1:0.2 \
  -c "trivy fs --scanners vuln,secret,misconfig /workspace"

# Secret scan
docker run --rm -v "$(pwd):/workspace:ro" \
  kpericak/ai-security-toolkit-1:0.2 \
  -c "cd /workspace && gitleaks detect --source ."

Related Blog Posts

• Security Toolkit for AI Agents: build process and usage guide