Diff-aware security scanner for GitHub PRs — flags mutable Express/NestJS/Next.js routes with no auth middleware and responses leaking sensitive fields. Deterministic, AST-based, human-in-the-loop.
security express typescript nextjs static-analysis github-app sast nestjs next-js cwe-306 security-agent code-review-assistant-active agent-skill cwe-200 express-security
-
Updated
Aug 11, 2026 - Go