← Projects

Code Analyzer — AI Code Security & Quality CLI

CLI tool using AI to detect bugs and security risks in codebases with CI/CD integration

Problem

Developers and teams often rely on multiple static analysis and security tools, which can be complex to configure and difficult to interpret.

Smaller teams and individual developers especially lack accessible tools that provide clear, AI-driven explanations of vulnerabilities and code quality issues in a single workflow.

There was a need for a lightweight, developer-friendly solution that could:
✦Analyze both local and remote repositories
✦Provide human-readable insights
✦Integrate easily into CI/CD pipelines

Solution

Code Analyzer was built as an open-source CLI that leverages DeepSeek AI to perform intelligent repository analysis.

The tool scans codebases, identifies potential bugs and vulnerabilities, and generates structured reports in multiple formats (including SARIF for security tooling).

Key design principles included:
✦Developer-first UX with simple commands
✦AI-enhanced explanations rather than raw static analysis output
✦Seamless automation through CI/CD workflows
✦Multi-language report support

This approach bridges the gap between traditional static analysis and modern AI-assisted developer tooling.

Tech stack

Python DeepSeek API CLI (argparse / packaging) GitHub Actions (CI/CD) SARIF reporting

Key results

✦ 19,000+ downloads, demonstrating strong developer adoption
✦ Simplified vulnerability detection workflow for individual developers
✦ Enabled automated security analysis inside CI/CD pipelines
✦ Provided multi-format reporting for integration with security ecosystems
✦ Open-source contribution enabling community feedback and improvements

GitHub Demo