Been messing around with this for a few months. Kept noticing my coding assistant had the same handful of issues - hardcoded secrets, missing auth checks, that kind of thing - so I put together a scanner tuned for exactly those patterns. Runs fully offline (wraps Semgrep under the hood) so none of your code actually leaves the machine. The part I actually like is the --prescriptions flag - it spits out a fixes.json with a ready-to-paste prompt for whatever assistant wrote the code, so you can hand the fix straight back to it instead of digging through the finding yourself. Install with one simple command: pip install canop Rules are still thin in places, so if something false-positives or you find a gap, an issue on the repo would genuinely help. Check it out here and happy to answer questions too! github.com/openbreach/CanoP   submitted by   /u/Slim_Marshall_Jesus [link]   [comments]