Open-source Python security triage for GitHub pull requests, repositories, and authorized web apps. Combines static and heuristic analysis, taint tracking, OSV dependency intelligence, risk scoring, and AI-assisted findings.
// readme
π₯ TriageKit π₯
Advanced Security Triage & Code Intelligence
Understand your code. Identify security risks. Prioritize what matters.
TriageKit is an open-source security analysis platform combining static analysis, heuristic detection, taint analysis, dependency intelligence, web security assessment, and AI-assisted reasoning into a unified security workflow.
Overview Β· Features Β· Architecture Β· Installation Β· Usage Β· Documentation Β· Support
Overview
TriageKit is designed to make security analysis more contextual, structured, and actionable.
Traditional scanning tools often produce large collections of alerts without adequately explaining their relationships, their relevance to the application, or what developers should investigate first.
TriageKit approaches this problem through multiple analysis layers that work together to evaluate code changes, repository contents, dependencies, and exposed web applications.
Rather than treating every pattern match as an independent vulnerability, TriageKit uses standardized findings, correlation, severityβ¦