Self-hosted alternatives to ci-security-scanning-with-strix

C

ci-security-scanning-with-strix

Add security scanning to CI/CD with Strix

ci-security-scanning-with-strix is a skill from the Strix project for adding security scanning to CI/CD, on GitHub Actions, GitLab CI or any pipeline, so that each pull request gets a diff-scoped AI pentest that can block the merge. It describes two ways to gate pull requests, which you can combine. The managed platform is connected once to the GitHub, GitLab or Bitbucket app, and it reviews every pull request with no workflow file, no runner and no LLM key, posting results as pull request comments and into a team dashboard. The self-hosted open-source CLI runs as a pipeline step inside your runner. It needs Docker on the runner and your own LLM key, and it is the choice for air-gapped or self-hosted CI. The self-hosted scan tests only the changed files, uses quick mode to stay fast, and returns exit code 2 when validated vulnerabilities are found, which fails the build. Both routes emit SARIF 2.1.0, so you can start with one and add the other later. The skill gives the GitHub Actions workflow for the self-hosted route, written as a security workflow file in .github/workflows. It is for teams that want security findings to appear as part of review, not as a separate audit later. It passes Gen Agent Trust Hub and Socket on skills.sh, and Snyk shows a warning. It has about 12,900 installs. Install it with npx skills add https://github.com/usestrix/strix --skill ci-security-scanning-with-strix.