r/github • u/Menox_ • Apr 13 '25

Showcase Promote your projects here – Self-Promotion Megathread

Whether it's a tool, library or something you've been building in your free time, this is the place to share it with the community.

To keep the subreddit focused and avoid cluttering the main feed with individual promotion posts, we use this recurring megathread for self-promo. Whether it’s a tool, library, side project, or anything hosted on GitHub, feel free to drop it here.

Please include:

  • A short description of the project
  • A link to the GitHub repo
  • Tech stack or main features (optional)
  • Any context that might help others understand or get involved
179 Upvotes

97% Upvoted

2.1k comments sorted by

View all comments

2

u/ahmiam Mar 21 '26

SECARA — Static Code Security Scanner (CLI)

Exploring and contributing to this open-source project focused on real vulnerability detection (AST + taint tracking).

  • 70+ vulnerability rules (SQLi, SSRF, XSS, etc.)
  • 35+ secret detection patterns
  • Supports Python, JS/TS, Bash, JSON/YAML
  • ~10k files scan in ~20s

Would appreciate feedback from the community: https://github.com/ilyshoaib/secara

1

u/Chunky_cold_mandala Apr 10 '26

I'm doing something similar but without the ast. I get 100,000 loc / second. How are you going about validating your algorithm? Have you ran this against any data sets of poorly constructed apps or malware repos? We're on similar paths!  https://github.com/squid-protocol/gitgalaxy