Add an Anthropic API key to have the AI Analysis Engine generate summaries with Claude instead of the built-in local engine. The key is stored only on this machine, in ~/.codescope/config.json, and is sent only to Anthropic's API.
Add a webhook URL (Slack incoming webhook or any endpoint that accepts JSON) to get notified when a rescan finds new vulnerabilities or secrets compared to the previous scan.
Paste a git repository URL (GitHub, GitLab, or any git remote) and CodeScope scans it just like a local project - no need to clone it yourself first. When a local git binary isn't available (e.g. this hosted demo), github.com repos are fetched live through GitHub's API instead, with no clone at all.
Live no-clone analysis has a 4,000-file limit per repository, since every file is fetched individually over the network. Larger repositories will fail to analyze here - for those (or for private repos), use "Run on your device" instead.
Prefer to run CodeScope on your own machine? It works from the terminal - your files are scanned directly from disk, nothing is uploaded anywhere. Get it from GitHub:
git clone https://github.com/btbatson/codescope.git cd codescope npm install node bin/codescope.js /path/to/your/project
That opens a local dashboard at http://localhost:4488. Run npm install -g . once and you can use the codescope command from any directory instead.