$ loading_
Query S3 security scan findings with AI classification and summaries.
Copy the install command and let the AI configure it · recommended for beginners
No copy-paste install info for "ci-triage-mcp" yet — see the docs or source repo.
Please query the latest Trivy scan results stored in S3 and list high-severity vulnerabilities grouped by image name.
A filtered list of security findings, showing high-severity items grouped by image name.
Use AI to classify this set of Semgrep findings, highlighting likely false positives and issues that should be prioritized.
Classified findings with labels that help distinguish likely false positives from priority fixes.
Please summarize this week's Trivy and Semgrep scan results from S3, including main risk types and overall status.
A scan summary describing the main risk categories and overall findings.
DevOps engineers or security-minded developers can directly query Trivy and Semgrep results stored in S3 instead of manually reviewing raw outputs. This helps them locate high-risk findings faster.
When there are many scan findings, teams can use Bedrock-powered AI classification to help identify likely false positives or issues worth prioritizing. This improves triage efficiency.
For reporting or routine reviews, users can generate summaries from existing scan results to quickly understand overall risk distribution and findings. This is useful for regular security status check-ins.
It provides triage tools for security scan results, allowing queries over Trivy and Semgrep findings stored in S3, plus AI-based classification and scan summaries.
Based on the description, scan results must be stored in S3, and AI classification is powered by Bedrock. More specific setup and configuration details are not provided; see the source repository.
It explicitly supports scan results from Trivy and Semgrep. The provided material does not say whether other scanners are supported.
Safely inspect, diagnose, and recover Dockerized services without host shell access.
Scan local file systems for vulnerabilities and leaked secrets using Trivy and Gitleaks.
Detect prompt injection, look up CVEs, and assess version impact.
Run comprehensive code and config security scans for AI coding assistants.
Run standardized security scans and reports for authorized assessments.
Scan codebases for LLM usage, AI frameworks, and exposed secrets.