mohdmusheer/codeshield-dotnet repository overview

⁠CodeShield AI – ASP.NET Core

AI-powered repository security scanner rebuilt in ASP.NET Core 10.

⁠Quick Start

⁠Prerequisites

• .NET 10 SDK
• (Optional) Git installed for remote repo cloning
• Groq API key for AI semantic scanning

⁠Run Locally

cd CodeShield.API
cp ../.env.example .env
# Edit .env and set GROQ_API_KEY
dotnet run

Open http://localhost:5000⁠

⁠Docker

docker-compose up --build

⁠Configuration

Set Groq__ApiKey in appsettings.json or as environment variable:

Groq__ApiKey=gsk_...

Without a Groq key, deterministic scanners (secrets, config, dependencies) still run fully.

⁠Features

• GitHub / GitLab URL cloning
• ZIP upload scanning
• Secrets, config risk, dependency vulnerability scanning
• AI semantic analysis via Groq LLM
• Real-time progress via SignalR
• Export: JSON, HTML, Markdown, CSV, SARIF, patch diff, fix prompts
• Dark / Light / System theme