GitView CodeAudit
Local security checks for Go backends: static analysis lays out the evidence chain first, and an open model only explains a finding — it never decides one.
GitView CodeAudit is a local security checker for Go backends: it first scans your backend statically, tracing call chains, data flow, SQL operations and HTTP routes to find the evidence, then tells you where SQL injection, broken access control and similar problems may hide. The division of labor is clear: static analysis finds problems and draws conclusions, while the model only explains a specific finding when you ask it to. The model runs locally on Ollama, and every piece of evidence quoted in an explanation is checked against the analysis results, so it can't be invented. It is a command-line tool: once installed, run a scan against a module, or start a local web version and click through it in the browser. The repository also includes a small deliberately vulnerable sample API, so every finding shown in the screenshots can be reproduced by following the docs. Two caveats: this is a local tool with no hosted demo — the demo link is the repository page; and the author admits its blind spots, for example authorization logic hidden where static analysis can't see it won't be recognized — the report states clearly which cases it will miss, so don't treat it as a catch-all audit.
@小周草稿箱