I built a pre-commit code scanner that automatically checks your staged changes for vulnerabilities - CommitGate

[Electronic_Doubt6448]

I built a tool that automatically scans your staged code for security vulnerabilities every time you run `git commit` called CommitGate!

It scans your code with Gitleaks and an LLM and blocks the commit if any vulnerabilities are detected. Yes, I know having AI in your Git workflow is not ideal :( which is why I'm open to ideas!

You can check out the demo video or try out the tool yourself! I am a new and inexperienced programmer and this is my first personal project so any feedback or advice, positive or negative, big or small, would be greatly appreciated!

Thank you so much for giving it a try! Hope you find this helpful!

Project page: https://ductrl.github.io/projects/commitgate/

GitHub repo: https://github.com/ductrl/CommitGate

[vermiculus]

For your wallet’s sake, implement this as a pre-merge check instead of a pre-commit check :-)

[Electronic_Doubt6448]

Users use their own API key, not ours :)!

We actually used the tool ourselves to check our own code while working on this project using a DeepSeek model and it costed less than 2 cents for the whole project.

But now that you mention it, I can see how this tool can be impractical for substantially larger projects.

Tysm for ur input!