Dev.to Security 🔐 Cybersecurity Sun, 08 Nov 2026 10:08:26 +0000 👁 0 📖 1 min read

Building and Launching My First Security GitHub Action: SOC Web Recon & Hardening

The Problem: Running local recon tools manually can be tedious and browser extensions are heavily sandboxed. The Solution: I built scanner, a FastAPI-backed audit tool designed to check security headers (CSP, HSTS), det

Melody Kelly

Posted on Nov 8

Building and Launching My First Security GitHub Action: SOC Web Recon & Hardening

#webdev #productivity #python #security

The Problem: Running local recon tools manually can be tedious and browser extensions are heavily sandboxed.

The Solution: I built scanner, a FastAPI-backed audit tool designed to check security headers (CSP, HSTS), detect server banners, run Nmap port scans, and discover subdomains via Certificate Transparency logs.

The Pivot: To make it genuinely useful for developers, I packaged the core engine into a composite GitHub Action (action.yml) so anyone can automate security audits right inside their PR checks.

Check it out:Github Repo

We're a place where coders share, stay up-to-date and grow their careers.

📰 Read the original article on Dev.to Security

Originally published by Dev.to Security. Aggregated on AIWithGhost for educational purposes — full credit and traffic to the original publisher.

← News 🔐 Cybersecurity 🏠 Home