Quick Start
terminal
# Clone and setup
$ git clone https://github.com/papadoxie/scanipy.git && cd scanipy
$ python -m venv .venv && source .venv/bin/activate
$ pip install -r requirements.txt
# Set your GitHub token
$ export GITHUB_TOKEN="your_token_here"
# Search for vulnerable patterns
$ python scanipy.py --query "extractall" --language python --run-semgrep
Key Features
Smart Code Search
Search GitHub for code patterns across millions of repositories with tiered star-based ranking.
Semgrep Integration
Automatically clone and scan top repositories with Semgrep for security vulnerabilities.
CodeQL Analysis
Run deep semantic security scanning powered by GitHub's CodeQL engine.
Containerized Execution
Run parallel scans using Kubernetes Jobs with EKS-ready deployments.
Database Support
SQLite for local dev, PostgreSQL for production. Full schema migration support.
Resume Capability
Resume interrupted analysis from where it left off. Never lose progress.