Cloud and DevOps

Review dependency, vulnerability, and license risk.

Review Dockerfile settings against defensive practices.

Analyze manifests for exposure and privilege risk.

Review IaC text for public exposure and privilege signals.

Review an API description for auth, transport, and schema gaps.

Review webhook configuration for signing and replay controls.

Explain permissions and flag broad actions.

Summarize package names, versions, and license concerns.