GuardScan - Release v1.0.0
GuardScan v1.0.0 - Initial Release
GuardScan - 100% Free & Open Source Privacy-First Security Scanning and AI Code Review CLI
Features
Security Scanning (FREE, Offline)
- Secrets detection with 20+ patterns (API keys, passwords, tokens)
- Dependency vulnerability scanning (npm, pip, Maven, Cargo)
- OWASP Top 10 detection (SQL injection, XSS, CSRF, XXE, etc.)
- Docker security scanning
- Infrastructure as Code security (Terraform, CloudFormation, Kubernetes)
- API security analysis (REST and GraphQL)
Code Quality & Analysis (FREE, Offline)
- Code metrics (cyclomatic complexity, Halstead metrics, maintainability index)
- Code smell detection (30+ anti-patterns)
- License compliance checking
- Compliance scanning (GDPR, HIPAA, PCI-DSS)
- Linter integration (ESLint, Pylint, RuboCop)
- LOC counter (20+ languages)
Testing & Performance (FREE, Offline)
- Test runner integration (Jest, pytest, JUnit)
- Mutation testing
- Performance testing and benchmarking
- SBOM generation (CycloneDX, SPDX formats)
AI-Enhanced Features (BYOK - Bring Your Own Key)
- Code explainer (
guardscan explain) - AI code review (
guardscan review) - Commit message generator (
guardscan commit) - Documentation generator (
guardscan docs) - Test generator (
guardscan test-gen) - Refactoring suggestions (
guardscan refactor) - Threat modelling (
guardscan threat-model) - Migration assistant (
guardscan migrate) - Interactive RAG-powered chat (
guardscan chat)
Supported AI Providers
- OpenAI (GPT-4, GPT-3.5)
- Anthropic Claude (Claude 3 Opus, Sonnet, Haiku)
- Google Gemini
- Ollama (local/offline models)
Installation
npm install -g guardscan
Quick Start
# Initialize configuration
guardscan init
# Run security scan
guardscan security
# AI code review
guardscan review
Requirements
Node.js >= 18.0.0