Users struggle with updating security checks in existing SaaS CI/CD tools, often requiring extensive rewriting of glue code or shell scripts. There's a need for a more flexible mechanism, possibly prompt-driven, to easily adapt security checks to changing requirements.
I built a DevSecOps AI workflow for a client, and it works really well 🔥 Why did I build this? Developers are now writing a lot of code with AI. But AI generated code often has security issues. As DevOps engineers, it is our responsibility to make sure the code we ship is secure. Existing SAST tools like Snyk can find vulnerabilities and insecure patterns, but only to a certain level. What we need now is AI driven security analysis inside CI/CD. It should scan code, find issues, and report them clearly. Some tools already offer this, but they depend heavily on AI models and end up costing 2x or more. Advanced features like penetration testing cost even more. So I built a workflow that runs on every pull request. It performs security analysis and posts a detailed report as a comment. This reduces cost from 2x to 1x, since you only pay for API usage not for the tool. Also, adding new security checks is simple. You just update the prompt. If you are curious, I built this using SIMAI. It is easier to use than n8n and quick to get started. ‼️ Try it here: https://sim.ai/r/VL1Mx If you want to learn how to build this workflow, I shared a full video on my channel. Link in the comments. ---