squid-protocol

squid-protocol/gitgalaxy

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

46 stars 3 forks 46 watchers Python Other

ai-security appsec auditing code-intelligence codebase-analysis cybersecurity devsecops graph-rag incident-response knowledge-graph legacy-modernization sarif sast sbom software-architecture static-analysis supply-chain-security zero-trust

View on GitHub Website

19 Open Issues Need Help Last updated: Jul 26, 2026

Open Issues Need Help

View All on GitHub

[Good First Issue] Deepen per-signature case counts beyond current ~1-pair floor (stretch/lower-priority) 1 day ago

good first issue testing core-engine

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust

Ruff W291: trailing whitespace in string literals (everywhere else) 6 days ago

good first issue python refactor priority: low

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust

Ruff W293: blank-line whitespace in cobol_to_java string literals 7 days ago

good first issue python refactor priority: low

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust

Refactor: Deduplicate Secrets Shunt Config (Configuration Drift) 9 days ago

good first issue refactor core-engine

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust

Ruff misc: E402 + ambiguous-unicode grab-bag (RUF001, RUF003) 12 days ago

good first issue python refactor priority: low

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust

Ruff UP045: Optional[X] -> X | None in config_resolver.py 12 days ago

good first issue python refactor priority: low

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust

Ruff DTZ005/DTZ007: naive datetime findings 12 days ago

good first issue python refactor priority: low

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust

Ruff W291: trailing whitespace in record_keeper.py string literals 12 days ago

good first issue python refactor priority: low

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust

Ruff misc: small comprehension/perf grab-bag (PERF102, SIM105, RUF005, C4xx, RUF015, stray RUF046) 12 days ago

good first issue python refactor priority: low

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust

Ruff SIM108: if/else-to-ternary findings 12 days ago

good first issue python refactor priority: low

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust

Ruff SIM118: `key in d.keys()` findings 12 days ago

good first issue python refactor priority: low

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust

Ruff PERF203: try/except-in-loop findings (review fault-isolation semantics first) 12 days ago

good first issue python refactor priority: low

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust

Ruff RUF046: redundant int() casts in gpu_recorder.py 12 days ago

good first issue python refactor priority: low

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust

Ruff SIM102: remaining nested-if findings (llm_recorder, security_lens, network/binary tools) 12 days ago

good first issue python refactor priority: low

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust

Ruff SIM102: nested-if findings in galaxyscope.py and language_lens.py 12 days ago

good first issue python refactor priority: low

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust

Ruff SIM102: nested-if findings in core/aperture.py and core/detector.py 12 days ago

good first issue python refactor priority: low

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust

Ruff PERF401: list-comprehension findings in recorders & tools 12 days ago

good first issue python refactor priority: low

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust

Ruff PERF401: list-comprehension findings in core engine files 12 days ago

good first issue python refactor priority: low

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust

Ruff PERF401: list-comprehension findings in llm_recorder.py 12 days ago

good first issue python refactor priority: low

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust