code-pathfinder
Active·★ 143·AGPL-3.0·Updated 2026-07-10
Code Pathfinder is an open-source, AI-native static code analysis tool that builds a queryable graph of your codebase for security teams. It uses AST, CFG, and DFG to trace data flows across multiple languages and provides context-aware vulnerability detection and triage.
#AI-Native Security#Static Code Analysis (SAST)#Vulnerability Scanner#Data Flow Analysis#Code Graph#CI/CD Security#Developer Tools#Python Security
01
Features
01Structural code analysis using AST, CFG, and DFG to find exploit paths.
02AI-powered vulnerability triage and context-aware validation with LLMs.
03Unified data flow tracing across multiple languages (Python, Docker, Docker Compose).
04Flexible deployment as IDE extension, CLI tool, or integrated into CI/CD pipelines.
02
Compatibility
Python
Language
Verified via docs
Docker
Configuration Language
Verified via docs
Docker Compose
Configuration Tool
Verified via docs
Linux
Operating System
Verified via docs
macOS
Operating System
Verified via docs
Windows
Operating System
Verified via docs
03
Quick start
1
$ pip install codepathfinder
04
Use cases
↳Detect CVEs and conduct vulnerability research by understanding dependency usage and attack surfaces.
↳Provide deep code intelligence (call graphs, data flows) to AI coding assistants like Claude.
↳Perform in-editor security checks to catch vulnerable patterns during code writing.
↳Integrate into CI/CD pipelines for automated security scanning with SARIF output.
05
Alternatives
aks-mcp★ 143
A Model Context Protocol (MCP) server that enables AI assistants to interact with AKS clusters. It serves as a bridge between AI tools (like Claude, Cursor, and GitHub Copilot) and AKS.
palico-ai★ 343
Build, Improve Performance, and Productionize your LLM Application with an Integrated Framework
CogniLayer★ 28
Stop re-explaining your codebase to AI. Infinite speed memory + code graph for Claude Code & Codex CLI. 17 MCP tools, subagent protocol, hybrid search, TUI dashboard, crash recovery. Save 80-200K+ tokens/session.
aguara★ 94
Security scanner for AI agent skills & MCP servers. 173 detection rules. 13 categories. 5 registries monitored daily. OpenClaw detection included. No API keys, no cloud, no LLM. One binary. Detection engine behind Oktsec.
Comments
Log in to leave a comment
No comments yet. Be the first!