code-scanner

MurphySec plugin for JetBrains IDEs, identify and fix open source vulnerabilities in your project. 墨菲安全推出的一款 JetBrains IDE 插件，可以用来识别并修复项目中的开源组件漏洞

GitHub Data Loss Prevention (DLP) Action: Scan Pull Requests for sensitive data, like credentials & secrets, PII, credit card numbers, and more.

Codety Scanner is a comprehensive code scanner designed to detect code issues for 30+ programming languages and IaC frameworks. It embeds more than 6,000 code analysis rules and can detect code smells, vulnerable code, secrets in the code, performance issues, style violations, and more.

🔍 code quality scanner for the AI-generated code era

Termux Doctor (tdoc) — CLI diagnostic, repair & code scanner for Termux on Android. Fixes broken packages, scans repos for bugs, monitors system health, and supports Bahasa Indonesia.

This action uses govulncheck to perform a scan of the code, afterwards it will parse the output and transform it into an Sarif Report, which will be uploaded to Github using the code-scanning API.

High-performance zero-dependency static analysis tool enforcing NASA Power of Ten rules across 20 programming languages, plus AI agent skill, MCP server config, prompt template, and LLM model security auditing.

Use SQL to instantly query secrets and more from source code. Open source CLI. No DB required.

Catch tech debt and hidden risks before they become incidents. Add m in front of github.com/user/repo to find functions and trace the logic.

Your vibe-coded app has hardcoded secrets, missing auth, and hallucinated imports. Find out in under a second.

Detects barcode or qr code scanning on document and emits the scanned code.

It is QR code app, It is implemented using Jetpack compose. I used Android CompoundBarcodeView inside composable, and new media picker for pick qr code from device.

The safety layer for AI-generated code. Scan and fix security issues, performance problems, and AI-specific anti-patterns. 22 rules. AST auto-fix. Zero config.

Free security & privacy scanner for AI-coded apps. 766 rules, 84 MCP tools, 13-layer defense, zero-trust sandbox, AI firewall. Runs locally, never sends data anywhere. Scan your AI-generated app for leaked keys, open databases, and injection holes in 5 seconds.

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

AI-ready code-base scanner that outputs Markdown or XML.

Devscope – AI-powered coding assistant that lets you scan, analyze, and improve code instantly. Upload or capture code snippets, get intelligent explanations, and receive optimized solutions — all in a sleek, chat-based interface.

Code-Copyright-Docgen：一键生成符合软著要求的源代码文档，支持 30+ 种语言、智能注释过滤、精确 60 页模式，提供 GUI 和 CLI 双入口。

[Archived] Experimental CLI for TODO scanning — built to explore coding agent collaboration patterns

Scan AI agent skills, plugins, MCP servers, and CLI tools (npm/PyPI/Go, cargo, release binaries, curl|bash installers) for malicious code before installation - one scan, every agent (Claude Code, Codex, Gemini, Hermes, OpenClaw). Powered by NVIDIA SkillSpector, Cisco mcp-scanner, Datadog GuardDog, VirusTotal + malcontent.