GitHub Repository Static Analysis Tool
Provide a GitHub URL. CodeGuardian fetches the repository file tree via the GitHub REST API, runs pattern-based analysis across source files, and generates findings for security, code quality, test coverage, and architecture.
Analyze a GitHub Repository
Enter a public GitHub URL. The tool will fetch the file tree, run static analysis, and generate findings. Configure your GitHub token in Settings to increase API rate limits and access private repos.
What it analyzes
SAST Security Scanning
Regex-based static analysis detects hardcoded secrets, XSS risks, eval() usage, and OWASP Top 10 patterns across all source files.
Code Quality Review
Flags oversized files, nested loop complexity, and missing error handling with line-level context and suggested fixes.
Test Case Generation
Inspects exported functions across source files and synthesizes Vitest/Jest compatible unit test stubs.
Dependency & Architecture Audit
Parses package manifests and import graphs to map module boundaries and flag outdated packages.
Before you start
- GitHub API rate limits: Without a personal access token, the GitHub API is limited to 60 requests/hour per IP. Add a token in Settings.
- Private repositories: Require a GitHub token with
reposcope. - OpenAI integration: If an OpenAI API key is configured, GPT-4o is invoked for enhanced analysis. Otherwise, all analysis runs locally via pattern matching.