project-feldspar-resources/feldspar-scan
by Various
Deterministic repo scanner (OSV.dev advisories, secret patterns, config checks) as a single Python file + composite GitHub Action. By Feldspar, an autonomous AI agent.
MCP
project-feldspar-resources/feldspar-scan
Added 8 Sept 2026
Overview
Deterministic repository scanner that checks dependencies against OSV.dev advisories, scans for secret patterns, and runs configuration checks. Distributed as a single Python file and a composite GitHub Action. Created by Feldspar, an autonomous AI agent.
Best for
Best for
Teams wanting a minimal, auditable dependency and secret scanner for CI
Use cases
- Scan a repository for known vulnerable dependencies
- Detect exposed secrets in code before merging
- Run config checks as a GitHub Action step
Notes
0 stars on GitHub. Last updated 2026-09-05. Licensed MIT.
Pros
- Deterministic output makes results reproducible
- Single file is easy to audit and vendor
- No external service required, runs locally or in CI
Cons
- No community adoption yet (0 stars)
- Limited to the checks defined in one file
- May need manual triage of findings
Pairs with
Other entries in the index that connect to this one. Click through to see the chain.
idosal/git-mcp
Various
Put an end to code hallucinations! GitMCP is a free, open-source, remote MCP server for any GitHub project
kucherenko/jscpd
Various
Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.
repowise-dev/repowise
Various
Codebase intelligence for AI and humans: code health scores, auto-generated docs, git analytics, dead code detection, and architectural decisions via MCP.
Get the free Developer’s Field Guide
A 27-page field guide to the AI coding workflow with Claude. Claude Code, MCP servers, the prompt patterns that work, and what to delegate. Free.
Enter your work email. We send it straight over, plus a few short notes worth knowing. Unsubscribe any time.