Repositories list

• codemodder-java

  Public
  a framework for building java codemods

  javasecurityquality+ 4

  javasecurityqualitylibraryframeworkstatic-analysiscodemods

  Java

  •

  GNU Affero General Public License v3.0

  •77 forks•4141 stars•77 issues•1111 pull requests•Updated Aug 13, 2026Aug 13, 2026

• codemodder-python

  Public
  Python implementation of the Codemodder framework

  Python

  •

  GNU Affero General Public License v3.0

  •1010 forks•4343 stars•2626 issues•1010 pull requests•Updated Aug 12, 2026Aug 12, 2026

• java-security-toolkit

  Public
  A set of security APIs meant to help secure Java code

  Java

  •

  MIT License

  •22 forks•2424 stars•44 issues•1010 pull requests•Updated Aug 12, 2026Aug 12, 2026

• pixee-cli

  Public
  Pixee CLI — binaries, container image, and coding-agent skills for the Pixee platform. Source lives in pixee-cli-private.

  clideveloper-toolsapplication-security+ 3

  clideveloper-toolsapplication-securityappsecpixeeagentic-appsec

  Other

  •1212 forks•3131 stars•1414 issues•00 pull requests•Updated Aug 10, 2026Aug 10, 2026

• simple-gradle-codemod-tutorial

  Public template
  An example codemodder codemod

  javacodemodcodemods

  javacodemodcodemods

  Java

  •

  MIT License

  •66 forks•1010 stars•22 issues•1010 pull requests•Updated Aug 6, 2026Aug 6, 2026

• homebrew-tap

  Public
  Homebrew formula(e) for Pixee

  Ruby

  •

  MIT License

  •00 forks•11 star•11 issue•11 pull request•Updated Aug 5, 2026Aug 5, 2026

• docs

  Public
  Python

  •

  Other

  •11 fork•22 stars•11 issue•11 pull request•Updated Aug 4, 2026Aug 4, 2026

• sarif-pydantic

  Public
  An implementation of the SARIF spec using Pydantic data models

  Python

  •

  MIT License

  •11 fork•55 stars•22 issues•00 pull requests•Updated Jun 1, 2026Jun 1, 2026

• enterprise-portal-content

  Public
  1414 forks•00 stars•00 issues•00 pull requests•Updated Apr 20, 2026Apr 20, 2026

• dfs-tree-visualizer

  Public
  Cinematic DFS traversal animation for vulnerability dependency trees

  JavaScript

  •00 forks•00 stars•00 issues•00 pull requests•Updated Feb 28, 2026Feb 28, 2026

• bad-java-code

  Public
  Java

  •11 fork•00 stars•33 issues•33 pull requests•Updated Aug 12, 2025Aug 12, 2025

• gpt-researcher

  Public archive
  LLM based autonomous agent that conducts deep local and web research on any topic and generates a long report with citations.

  Python

  •

  Apache License 2.0

  •3.9k3.9k forks•00 stars•00 issues•00 pull requests•Updated Aug 4, 2025Aug 4, 2025

• backstage

  Public
  Backstage is an open framework for building developer portals

  TypeScript

  •

  Apache License 2.0

  •7.5k7.5k forks•00 stars•00 issues•00 pull requests•Updated Apr 27, 2025Apr 27, 2025

• codetf-java-bindings

  Public
  Java

  •

  MIT License

  •00 forks•00 stars•11 issue•00 pull requests•Updated Apr 15, 2025Apr 15, 2025

• codemodder-specs

  Public
  Python

  •

  MIT License

  •00 forks•1414 stars•33 issues•22 pull requests•Updated Mar 12, 2025Mar 12, 2025

• ci-integrations

  Public
  Pixee CI Integrations

  Python

  •00 forks•00 stars•33 issues•33 pull requests•Updated Mar 3, 2025Mar 3, 2025

• python-dependency-manager

  Public
  Python

  •00 forks•44 stars•22 issues•00 pull requests•Updated Feb 11, 2025Feb 11, 2025

• cookiecutter-codemodder-plugin

  Public
  Template repository for creating custom Python codemod plugins

  Python

  •

  MIT License

  •00 forks•1212 stars•44 issues•00 pull requests•Updated Feb 11, 2025Feb 11, 2025

• python-security

  Public
  Security toolkit for the Python community

  Python

  •

  MIT License

  •22 forks•1515 stars•77 issues•33 pull requests•Updated Feb 11, 2025Feb 11, 2025

• pygoat

  Public
  HTML

  •11 fork•11 star•22 issues•22 pull requests•Updated Feb 10, 2025Feb 10, 2025

• upload-tool-results-action

  Public
  A GitHub Action that allows Pixee to fix issues found by other code scanners

  TypeScript

  •11 fork•1616 stars•22 issues•00 pull requests•Updated Jan 16, 2025Jan 16, 2025

• sonar-api-getter

  Public
  Utility for retrieving and combining paginated results from the Sonar APIs

  Python

  •

  MIT License

  •00 forks•22 stars•11 issue•00 pull requests•Updated Jan 15, 2025Jan 15, 2025

• bad-code-public

  Public
  Python

  •00 forks•00 stars•11 issue•00 pull requests•Updated Jan 5, 2025Jan 5, 2025

• ClassicWebGoat.NET

  Public template
  OWASP WebGoat.NET

  C#

  •748748 forks•00 stars•22 issues•00 pull requests•Updated Dec 29, 2024Dec 29, 2024

• juice-shop

  Public
  OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

  TypeScript

  •

  MIT License

  •19k19k forks•00 stars•00 issues•33 pull requests•Updated Dec 21, 2024Dec 21, 2024

• codemodder-docs

  Public
  CSS

  •

  Other

  •22 forks•1212 stars•22 issues•11 pull request•Updated Aug 31, 2024Aug 31, 2024

• WebGoat.NET

  Public
  WebGoat.NETCore - port of original WebGoat.NET to .NET Core

  C#

  •158158 forks•00 stars•00 issues•11 pull request•Updated Jul 25, 2024Jul 25, 2024

• NodeGoat

  Public
  The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effecti…

  HTML

  •

  Apache License 2.0

  •2.8k2.8k forks•00 stars•00 issues•00 pull requests•Updated Jun 15, 2024Jun 15, 2024

• OWASPWebGoatPHP

  Public
  A deliberately vulnerable web application for learning web application security.

  PHP

  •

  Apache License 2.0

  •251251 forks•00 stars•00 issues•00 pull requests•Updated Feb 25, 2024Feb 25, 2024

• semgrep-example

  Public
  Example repository showing Pixeebot fixing a semgrep vulnerability reported to GitHub

  Java

  •00 forks•00 stars•33 issues•00 pull requests•Updated Jan 11, 2024Jan 11, 2024