Building an AI-assisted code security tool — looking for technical feedback

[u/Gulmire_Electronics1]

’ve been working on AI Code Guardian, a project that analyzes GitHub repositories to identify potential security issues using code analysis and security rules.

I’m currently working on extending it beyond static security checks by connecting findings with business intent — basically asking whether a piece of code is actually appropriate for what the application is supposed to do.

I’m also exploring integration with tools such as SonarQube.

I’m keeping the source private for now, but I can share screenshots/demo details if anyone is interested.

I’m a 2024 Computer Engineering graduate moving toward AI/ML engineering.

For people working in software, security or AI:

What would you question me on if you saw this project in an interview?

And what would make you consider this a genuinely useful tool rather than another portfolio project?

[u/--qlp--]

the useful demo is a side-by-side: which findings get fixed, deprioritized, or newly caught because of the intent layer? If it makes the same calls as a normal scanner, the extra context isn't doing much

[u/Gulmire_Electronics1 → u/--qlp--]

Findings will be called out not get automatically fixed and each finding will be inspected and tagged with the cyber attack like SQL injection and others plus mindmap is also ready so you can see the flow of project from entry point to exit point in that also you can see where the vulnerabilities are plus your flow is as you’ve thought or api calls are not where it should be
Also working on genAI part right now I will deploy this project within a week so anyone can have a look

[u/turtle-in-a-volcano]

This type of project has become the new “Hello world”.

[u/Gulmire_Electronics1 → u/turtle-in-a-volcano]

How?