Deterministic malicious PR scanner

Catch malicious code in PRs before AI review even runs

Problem

OSS pull requests often hide deeply obfuscated malicious code that LLM review misses; by the time AI review finishes it can be too late. Someone built a deterministic GitHub Action for this, confirming the gap.

Solution

A lightweight GitHub Action that runs deterministic rules on PR diffs: backdoored dependencies, obfuscated code, outbound network calls, suspicious base64/decode-execute, unusual env reads, and outputs a concise risk report—acting as a fixed gate before AI review tools.

Users

Solo maintainers of OSS repos, small teams, projects with many external contributors

MVP

One-click GitHub Action install; rule-based scan of PR diffs; built-in malicious pattern library; risk summary and evidence snippets in PR comments; allowlist and ignore rules.

Revenue

Free for public repos; paid per-repo or per-scan for private repos; enterprise with custom rules and self-hosting

Why now

Supply-chain attacks are rising and AI review is common but lacks a deterministic pre-filter—a solo dev can ship a usable rule set in weeks