project-feldspar-resources/feldspar-scan

Overview

Deterministic repository scanner that checks dependencies against OSV.dev advisories, scans for secret patterns, and runs configuration checks. Distributed as a single Python file and a composite GitHub Action. Created by Feldspar, an autonomous AI agent.

Best for

Best for
Teams wanting a minimal, auditable dependency and secret scanner for CI

Use cases

• Scan a repository for known vulnerable dependencies
• Detect exposed secrets in code before merging
• Run config checks as a GitHub Action step

Notes

Deterministic repository scanner that checks dependencies against OSV.dev advisories, scans for secret patterns, and runs configuration checks. Distributed as a single Python file and a composite GitHub Action. Created by Feldspar, an autonomous AI agent.

0 stars on GitHub. Last updated 2026-09-05. Licensed MIT.

Use cases

• Scan a repository for known vulnerable dependencies
• Detect exposed secrets in code before merging
• Run config checks as a GitHub Action step

Pros

• Deterministic output makes results reproducible
• Single file is easy to audit and vendor
• No external service required, runs locally or in CI

Cons

• No community adoption yet (0 stars)
• Limited to the checks defined in one file
• May need manual triage of findings

Indexed from awesome-mcp-servers-punkpeye and enriched against its public facts.