Show HN: Sighthound - open-source vulnerability scanner for source code

Category: security

Tags: static-analysis, vulnerability-scanner, security

Score: 6.0/10 (Innovation: 5, Technical: 7, Documentation: 6, Utility: 6)

Sighthound is a static vulnerability scanner that uses tree-sitter AST parsing and supports pattern matching and taint-flow analysis across multiple languages. Its combination of AST-aware rules, taint tracking, and multi-file support makes it a solid security tool for developers.

Target audience: backend devs, security engineers, devops

Repository: https://github.com/Corgea/Sighthound · Rust · MIT · 15 stars

View on Hacker News