How vishnu17306/semantic-code-vuln-spotting works
The product is a Python codebase triage CLI. Its main workflow extracts inline comments and Git commit messages, classifies those notes, scans Python files for vulnerabilities, links nearby comment and scanner findings, then filters and sorts a text or JSON report. The scanner supports SQL injection, command injection, hardcoded-secret, and path-traversal checks, plus SARIF output when used independently. The graph follows the documented and excerpted runtime calls; detector implementations share scanner.py. Other listed files mainly support evaluation or labeling rather than the runtime product.
Main entry points: scanner.py Vulnerability scanner · triage.py Triage CLI · commit_extractor.py Commit extraction · comment_extractor.py Comment extraction
Components 14
Evidence collection
- Python file walk
triage.py - Comment extraction
comment_extractor.py - Commit extraction
commit_extractor.py
Analysis
- Severity classifier
severity_classifier.py - Vulnerability scanner
scanner.py - SQL injection check
scanner.py - Command injection check
scanner.py - Secret check
scanner.py - Path traversal check
scanner.py
Triage output
- Triage CLI
triage.py - Link and sort
triage.py - Text or JSON report
triage.py
Other components
- Developer
- Git history
Connections 13
- Developer → Triage CLI: runs
README.md - Triage CLI → Python file walk: scans files
triage.py - Python file walk → Comment extraction: extracts comments
triage.py - Python file walk → Vulnerability scanner: scans files
triage.py - Triage CLI → Commit extraction: reads history
triage.py - Commit extraction → Git history: runs git log
commit_extractor.py - Triage CLI → Severity classifier: classifies records
triage.py - Vulnerability scanner → SQL injection check: dispatches checks
scanner.py - Vulnerability scanner → Command injection check: dispatches checks
scanner.py - Vulnerability scanner → Secret check: dispatches checks
scanner.py - Vulnerability scanner → Path traversal check: dispatches checks
scanner.py - Triage CLI → Link and sort: links and sorts
triage.py - Link and sort → Text or JSON report: formats output
triage.py