Building and Launching My First Security GitHub Action: SOC Web Recon & Hardening

The Problem: Running local recon tools manually can be tedious and browser extensions are heavily sandboxed. The Solution: I built scanner, a FastAPI-backed audit tool designed to check security headers (CSP, HSTS), detect server banners, run Nmap port scans, and discover subdomains via Certificate Transparency logs. The Pivot: To make it genuinely useful for developers, I packaged the core engine into a composite GitHub Action (action.yml) so anyone can automate security audits right inside their PR checks. Check it out:Github Repo