Original Summary

Student here, been chipping away at this for a few months in between classes. The idea came from noticing my own AI-assisted code kept having the same problems — hardcoded secrets, missing rate limiting, stuff like that. So I built CanoP, a scanner tuned for exactly those patterns, plus a feature I'm pretty proud of: it exports a ready-to-paste fix prompt so you can hand the bug straight back to whatever assistant wrote it. Runs locally, pip install canop if anyone wants to poke at it. Genuinely early - would love to know if it's useful, where it falls short anything. github.com/openbreach/CanoP   submitted by   /u/Slim_Marshall_Jesus [link]   [comments]

中文概览

中文标题： 针对AI生成代码的安全扫描器——欢迎反馈

一名学生开发了CanoP，一个针对AI辅助代码常见问题的安全扫描器，例如硬编码密钥、缺少速率限制等。它还导出可直接粘贴的修复提示，便于把问题交回给生成代码的助手。可本地运行，pip install canop；项目尚处早期，作者欢迎反馈。

  • 情报分类：开源项目与落地
  • 分类依据：作者发布AI代码安全扫描器开源项目，含GitHub链接，属于开源项目与落地。
  • 信息来源：Reddit · SideProject
  • 发布时间：2026/9/22 19:27:35