Automated Vulnerability Remediation & CI/CD Security Gate with Semgrep
Static code analysis engine that intercepts pull requests, detects OWASP Top 10 vulnerabilities, and auto-generates git diff patches using AST parsing.
Project Overview
A continuous integration security orchestrator that parses Abstract Syntax Trees (AST) using custom Semgrep and Python AST rules. It flags SQL injections, XSS vulnerabilities, and leaked secrets before merge, generating validated pull request patches to resolve security issues automatically.
A continuous integration security orchestrator that parses Abstract Syntax Trees (AST) using custom Semgrep and Python AST rules. It flags SQL injections, XSS vulnerabilities, and leaked secrets before merge, generating validated pull request patches to resolve security issues automatically.
Static code analysis engine that intercepts pull requests, detects OWASP Top 10 vulnerabilities, and auto-generates git diff patches using AST parsing.