You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
A Python-based security scanner for analyzing open-source repositories, designed to detect malicious or insecure code. This tool is intended to help users safely download and use open-source tools.
4
+
5
+
## Features
6
+
7
+
-**Automated Repository Scanning**: Clone and scan repositories from GitHub.
8
+
-**Malicious Code Detection**: Detects risky patterns such as `eval`, `exec`, and unauthorized network connections.
9
+
-**Insecure Code Practices**: Scans for hardcoded secrets, insecure cryptographic practices, and dangerous functions.
10
+
-**Dependency Scanning**: Checks for vulnerable dependencies using GitHub's Advisory Database.
11
+
-**Configurable Security Policies**: Customizable rules and whitelists/blacklists.
12
+
-**Output Report**: Generates a detailed JSON report of all flagged issues.
13
+
-**CI/CD Integration**: Provides a GitHub Action for automatic scanning.
14
+
-**Optional Docker Support**: Dockerized version for secure and isolated scans.
15
+
16
+
## Getting Started
17
+
18
+
### Requirements
19
+
20
+
- Python 3.8 or later
21
+
-[Git](https://git-scm.com/) for cloning repositories
22
+
- Required Python packages (install via `requirements.txt`)
0 commit comments