# Security Scan Checklist

- secret loading and storage
- auth and authorization boundaries
- request validation and serialization
- dependency and package risk
- logging and sensitive data exposure