LineageLint Schema Risk

Evidence-first SQL CREATE TABLE schema-change risk analysis with blast radius, findings, safe migration patch, and rollout plan

Review a built-in risky AWS IAM identity policy for administrator access, wildcard resources, PassRole, workload-creation escalation, secret access, least privilege, and missing guardrails without accessing an AWS account

Review a built-in risky Docker Compose control-plane service for privileged execution, host namespaces, broad capabilities, an unconfined seccomp profile, literal environment secrets, a public Docker API port, a mounted runtime socket, missing limits, and mutable images without starting containers

Review a built-in risky Dockerfile for embedded build secrets, mutable base images, unverified downloads, unsafe permissions, root runtime, and package-manager hygiene without building or pulling an image

Review a built-in risky Kubernetes deployment and ClusterRole against Pod Security Standards, RBAC least privilege, secret handling, image pinning, resource bounds, and network exposure without contacting a cluster

Run a built-in OpenAPI 3.x consumer-compatibility review showing a removed operation and a versioned migration plan

Generate a built-in k6 smoke/load-test script from OpenAPI 3.x without executing the target API

Generate a runnable TypeScript MCP stdio server from a built-in OpenAPI 3.x contract using the stable Model Context Protocol SDK v1

Generate a built-in, runnable pytest/httpx API test module from an OpenAPI 3.x contract without executing the target API

Audit a built-in vulnerable OpenAPI 3.1 contract against deterministic OWASP API Security Top 10 2023 contract-level checks without active scanning