AI coding agents write more code than ever. AI Code Guard is a free GitHub Action that reviews every pull request for security issues and posts findings directly in the PR.
Catches, no API key needed: hardcoded secrets, dangerous shell commands, risky workflow permissions, unpinned dependencies, injection patterns.
Optional AI review adds context-aware checks — every finding must cite real code as evidence, or it's dropped.
MIT licensed. One-line install.
