squid-protocol

squid-protocol/gitgalaxy

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

46 stars 3 forks 46 watchers Python Other

ai-security appsec auditing code-intelligence codebase-analysis cybersecurity devsecops graph-rag incident-response knowledge-graph legacy-modernization sarif sast sbom software-architecture static-analysis supply-chain-security zero-trust

View on GitHub Website

28 Open Issues Need Help Last updated: Jul 26, 2026

Open Issues Need Help

View All on GitHub

Leftover debug print("GG SPLICE FUNCS", ...) in galaxyscope.py fires on every real scan about 1 month ago

good first issue refactor priority: low

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust

Ruff SIM118: `key in d.keys()` findings about 1 month ago

good first issue python refactor priority: low

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust

Contiguous 'dead zones' of real functions silently lost from extraction on production files, independent of mid-file language drift about 1 month ago

bug help wanted core-engine priority: high

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust

Fix dead zero-trust-sbom console-script entry point (module doesn't exist) about 1 month ago

bug good first issue supply-chain priority: low

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust

New signal (needs design pass): bulk environment/secret dump, gated on a nearby network sink about 1 month ago

enhancement good first issue question appsec supply-chain priority: low

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust

Ruff RUF046: redundant int() casts in gpu_recorder.py about 2 months ago

good first issue python refactor priority: low

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust

Ruff PERF401: list-comprehension findings in core engine files about 2 months ago

good first issue python refactor priority: low

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust

Ruff misc: small comprehension/perf grab-bag (PERF102, SIM105, RUF005, C4xx, RUF015, stray RUF046) about 2 months ago

good first issue python refactor priority: low

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust

Ruff misc: E402 + ambiguous-unicode grab-bag (RUF001, RUF003) about 2 months ago

good first issue python refactor priority: low

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust

tabs_vs_spaces conflates a lighthearted structural fact with a risk-exposure score -- move out of RISK_SCHEMA about 2 months ago

bug good first issue refactor schema priority: low

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust

obfuscation_flag / GlassWorm-style detector: needs a real design decision, not a code fix about 2 months ago

help wanted question appsec priority: low

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust

file_data.ecosystem_baseline never propagated from repo-level (100% empty across 1.2M files) about 2 months ago

bug good first issue data-integrity schema priority: medium

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust

Dead naming-convention signature family: struct_camel_case/snake_case/pascal_case/upper_case/short_vars/long_vars/var_decl have zero producers about 2 months ago

bug good first issue data-integrity schema priority: medium

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust

docs(wiki): add discovery index for LLM-reports directory about 2 months ago

documentation good first issue

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust

[Good First Issue] Deepen per-signature case counts beyond current ~1-pair floor (stretch/lower-priority) about 2 months ago

good first issue testing core-engine

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust

Ruff W291: trailing whitespace in string literals (everywhere else) about 2 months ago

good first issue python refactor priority: low

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust

Ruff W293: blank-line whitespace in cobol_to_java string literals about 2 months ago

good first issue python refactor priority: low

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust

Refactor: Deduplicate Secrets Shunt Config (Configuration Drift) about 2 months ago

good first issue refactor core-engine

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust

Ruff UP045: Optional[X] -> X | None in config_resolver.py about 2 months ago

good first issue python refactor priority: low

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust

Ruff DTZ005/DTZ007: naive datetime findings about 2 months ago

good first issue python refactor priority: low

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust

Ruff W291: trailing whitespace in record_keeper.py string literals about 2 months ago

good first issue python refactor priority: low

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust

Ruff SIM108: if/else-to-ternary findings about 2 months ago

good first issue python refactor priority: low

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust

Ruff PERF203: try/except-in-loop findings (review fault-isolation semantics first) about 2 months ago

good first issue python refactor priority: low

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust

Ruff SIM102: remaining nested-if findings (llm_recorder, security_lens, network/binary tools) about 2 months ago

good first issue python refactor priority: low

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust

Ruff SIM102: nested-if findings in galaxyscope.py and language_lens.py about 2 months ago

good first issue python refactor priority: low

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust

Ruff SIM102: nested-if findings in core/aperture.py and core/detector.py about 2 months ago

good first issue python refactor priority: low

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust

Ruff PERF401: list-comprehension findings in recorders & tools about 2 months ago

good first issue python refactor priority: low

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust

Ruff PERF401: list-comprehension findings in llm_recorder.py about 2 months ago

good first issue python refactor priority: low

squid-protocol/gitgalaxy

46

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Python

#ai-security#appsec#auditing#code-intelligence#codebase-analysis#cybersecurity#devsecops#graph-rag#incident-response#knowledge-graph#legacy-modernization#sarif#sast#sbom#software-architecture#static-analysis#supply-chain-security#zero-trust