codescan

Agent-native code security review with MCP, structured findings, and practical pre-merge scanning workflows. Maintained by HeJiguang on GitHub, where it has earned 22 stars from the community.

It's actively developed around ai, code-review, codex, and is a solid reference for anyone building with these tools.