agentgg
Open-source agentic SAST scanner: AI agents follow imports and call graphs to confirm findings in a repo or PR diff.
Agent by agentgg-dev
IndexedApache-2.0★ 441
Get started
Setup steps are in the repository. Website · Repository
About
agentgg is a command-line static security scanner whose agents read the code, follow imports and the call graph, and confirm a finding before reporting it. It scans a whole repository or only a git diff, resumes interrupted scans, and writes a summary plus one markdown file per finding. You supply a key for one model provider such as Anthropic, OpenAI, AWS Bedrock, Google Vertex AI, OpenRouter or Ollama, or use the hosted platform at app.agentgg.dev.
Use cases: security, security-scanning, code-review
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Fact sheet
- Jobs
- securityREADME
- Autonomy
- Autonomous: runs tasks end to end and reports backREADME
- Where you use it
- Terminal, WebREADME
- Hosting
- Hosted or self-hostedREADME
- Models
- anthropic, openai, aws-bedrock, google, openrouter, ollamaREADME
- Open source
- YesREADME
Facts extracted by Claude Haiku 5.5 from the linked sources on Oct 24, 2026. Wrong fact? Tell us.
Signals
- Stars
- 441
- Forks
- 52
- Open issues
- 0
- Last commit
- Oct 20, 2026 (8 days ago)
From GitHub (fetched Oct 24, 2026).
Details
- License
- Apache-2.0
- Repository
- github.com/agentgg-dev/agentgg
- Website
- agentgg.dev/
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
- Source
- READMEgithub-graphql
Cite this page
agentgg. Agent Mart. https://agentmart.dev/agents/agentgg (last updated 2026-10-24)