Scan code and dependencies for security vulnerabilities. Check npm audit, pip safety, and common security issues.