codereview

基于大模型(DeepSeek,OpenAI等)的 GitLab 自动代码审查工具；支持钉钉/企业微信/飞书推送消息和生成日报；支持Docker部署；可视化 Dashboard。

An extensible and friendly code review tool for projects and companies of all sizes.

Agentic AI framework for enterprise workflow automation.

🤖 GPT（ Deepseek and more ） Code Review for Gitlab （针对于 Gitlab 的 LLM 辅助 Code Review 工具）项目详细文档 👇🏻

mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swift, and Objective C Code. mobsfscan uses MobSF static analysis rules and is powered by semgrep and libsast pattern matcher.

An AI-powered GitHub code review tool that uses LLMs to detect high-confidence, high-impact issues—such as security vulnerabilities, bugs, and maintainability concerns.

Self-hosted AI code reviewer with indexed PR reviews, walkthroughs, vulnerability scanning, dependency graphs, custom rules, and a learning loop.

Find credentials and secret with 170+ rules covering across source code, Web URL, and CI/CD, verifies them against vendor APIs, and generates SARIF, JSONL, HTML, PDF, or Excel reports.

A clone of Flappy Bird, using Pygame.

Prototype Gitlab Webook that submits code to OpenAI for review

Catching bugs in code with AI, fully local CLI app

This course uses a deliberately vulnerable banking application to demonstrate common security vulnerabilities, their impact, and how to fix them. The application is built with Flask (backend) and React (frontend).

A GitHub action for automatically evaluating the logic level impacts of Pull Requests. Multi languages support.

AI-powered code reviews

AI-powered code review assistant for gitlab - intelligent suggestions and automated analysis.

This tool automates code reviews for GitLab merge requests and GitHub pull requests using OpenAI's GPT model.

Automatic tool using for crawling code to find low-hang fruit vulnerabilities - Based on OWASP Secure Code Review Guide

DRSource is an extensible, multi-language static analysis tool designed to detect vulnerabilities in source code. It uses a pluggable architecture to combine multiple detection techniques—from simple regex matching to advanced AST-based taint analysis—all driven by a central, user-configurable knowledge base.

A supervised learning based tool to identify toxic code review comments

A PR reviewer bot for AzureDevops using OpenAI/Meta-LLama