Critique code and configuration for authentication, authorization, injection, secrets handling, and supply chain risks
