Audit AI-agent GitHub Actions workflows for prompt-injection, token, and secret-exposure risks
-
Updated
Jul 10, 2026 - Python
#
code-scanning
Here are 91 public repositories matching this topic...
Drag-and-drop scanner for OpenClaw repos
-
Updated
Apr 23, 2026 - Python
AgentGuard Demo — CI/CD integration with 8 real Code Scanning alerts on every push
security demo ci-cd sarif code-scanning sast ai-security github-actions agent-security owasp-asi agentguard
-
Updated
Jul 5, 2026 - Python
The verification portfolio as one CI check — the aggregate is the weakest leg, never the mean
-
Updated
Sep 4, 2026 - Python
Unified security scanner orchestrator — run Semgrep, Bandit, Checkov, Gitleaks, Trivy & TruffleHog with one command or GitHub Action; one score + SARIF to Code Scanning.
security static-analysis sca sarif devsecops code-scanning vulnerability-scanner sast github-action secrets-detection
-
Updated
May 31, 2026 - Python
Semgrep rules for AI agent code: static analysis for LLM applications in Python, TypeScript and JavaScript. Finds model output reaching exec, shells, SQL, URLs, files and HTML, user input in system prompts, over-broad tools, MCP servers without auth, leaked keys and unsafe model loading. 36 tested rules, CWE and OWASP mapping.
mcp static-analysis owasp hacktoberfest ssrf security-automation security-tools devsecops ai-agents code-scanning sast ai-security github-actions semgrep semgrep-rules prompt-injection llm-security agentic-ai agent-security
-
Updated
Oct 5, 2026 - Python
An AI-powered code security analysis platform that helps developers identify and fix security vulnerabilities through comprehensive scanning, smart mitigation, and detailed reporting.
static-analysis cybersecurity web-security vulnerability-detection security-tools security-analysis code-scanning security-testing code-security ai-powered
-
Updated
Mar 13, 2026 - Python
Static MCP package-reference mutability checker: Python CLI and GitHub Action. No discovered server execution. Broader config/baseline tools: Orynval Labs.
python security mcp cursor python-cli sarif devsecops code-scanning windsurf ai-security github-actions dependency-security supply-chain-security model-context-protocol agent-security claude-code mcp-security ai-agent-security mcpsecurity
-
Updated
Oct 4, 2026 - Python
Does this code phone home? A privacy-focused static analyzer that traces system, user and hardware data to network sinks and flags telemetry sent without an opt-out check — including inverted DO_NOT_TRACK guards. Python, JS/TS, Go. SARIF + Privacy Nutrition Label.
python golang tree-sitter privacy typescript static-analysis telemetry taint-analysis sarif security-tools devsecops code-scanning sast privacy-tools do-not-track
-
Updated
Sep 17, 2026 - Python
Command-line interface for AI Code Security Reviewer — scan code and output text, JSON, or SARIF for CI/CD integration
-
Updated
Jul 18, 2026 - Python
CI-friendly secret scanner with redacted JSON/SARIF output and reusable GitHub Action support.
python security pre-commit cybersecurity sarif devsecops code-scanning github-actions secret-scanning secrets-scanning
-
Updated
Aug 10, 2026 - Python
Security scanner for MCP servers — audit capabilities, detect risks, generate SARIF reports
python cli security mcp scanner static-analysis supply-chain sarif security-tools devsecops ai-agents code-scanning sast supply-chain-security model-context-protocol agent-security
-
Updated
Oct 5, 2026 - Python
Advanced CI/CD supply-chain risk analyzer with dependency confusion detection, policy-as-code, SARIF, OSV intelligence, dashboard, and Docker deployment.
docker cybersecurity software-supply-chain osv security-scanner sarif devsecops code-scanning policy-as-code github-actions fastapi supply-chain-security dependency-confusion ci-cd-security
-
Updated
Sep 17, 2026 - Python
GitHub Actions for AI agent and supply chain security checks: audit agent configs (Claude Code settings, MCP servers, Cursor rules, CLAUDE.md) for risky permissions and prompt injection, find secrets in prompt files and notebooks, diff SBOMs in PR comments, audit licences, validate llms.txt, ping IndexNow. SARIF output, no dependencies.
mcp spdx hacktoberfest security-automation sarif devsecops code-scanning ai-security license-compliance sbom github-actions cyclonedx secret-scanning supply-chain-security composite-action indexnow prompt-injection llms-txt agent-security
-
Updated
Oct 5, 2026 - Python
aicaudit — AI-powered code audit for Python: taint-path static analysis + evidence-grounded AI verdicts. Every result ships with a machine-checkable source-to-sink path.
python cli security security-audit ai mcp static-analysis pre-commit developer-tools code-quality taint-analysis appsec security-tools ai-agents code-scanning sast code-audit llm mcp-server
-
Updated
Oct 3, 2026 - Python
Security checker for Python, aimed at code AI agents write and run: SQL, command and code injection, deserialization, SSTI, XXE, hardcoded credentials. Emits SARIF for GitHub Code Scanning.
python programming-language compiler static-analysis refinement-types taint-analysis appsec security-scanner sarif code-scanning sast effect-system ai-generated-code
-
Updated
Oct 3, 2026 - Python
Static analyzer that hunts insecure AI/LLM integration patterns — leaked keys, prompt-injection sinks, and LLM output flowing into RCE/XSS/SQLi. Zero deps.
python cli ai static-analysis owasp appsec security-scanner security-tools devsecops code-scanning sast ai-security llm llmops prompt-injection llm-security
-
Updated
Jul 1, 2026 - Python
Your app narrates its own secrets into its logs. Read-only Leak Ledger: secrets, PII, request dumps, leftover console.log — path:line + reconstructed output. Python stdlib.
javascript python cli security static-analysis logging pre-commit secrets developer-tools observability code-scanning pii read-only rote modiqo log-leak-map
-
Updated
Sep 3, 2026 - Python
🛡️ RepoShield-CLI - Lightweight Terminal Git Repository Full-Dimension Security Audit Engine | 轻量级终端Git仓库全维度安全审计引擎 - Zero Dependencies, 7 Scan Dimensions, 100+ Rules, TUI Dashboard, Multi-Format Reports
-
Updated
May 27, 2026 - Python
Add this topic to your repo
To associate your repository with the code-scanning topic, visit your repo's landing page and select "manage topics."