RepoGuard-IfeCodes installs statistics

RepoGuard automatically scans your repositories for malicious code, obfuscated payloads, hardcoded secrets, and supply chain attacks. On every push, RepoGuard detects threats and opens an automated fix PR — so vulnerabilities are caught and patched before they reach production.

Capabilities

• Scans every file on installation and on every push to your default branch or any open branch PR • Detects obfuscated malware, reverse shells, crypto miners, and hardcoded secrets • Automatically opens fix PRs with malicious code removed and findings documented • Falls back to a security issue when write access is unavailable • Monitors workflow files for suspicious triggers and secret exfiltration

Benefits

• Zero config: Install and RepoGuard immediately scans your entire codebase • Automated fixes: No manual remediation — RepoGuard patches what it can automatically • Audit trail: Every finding is logged with severity, file, and rule in a PR or issue • Supply chain protection: Detects typosquatted packages and suspicious postinstall scripts • Team alerts: Slack notifications with full finding details and repo links

Getting Started

Requirements:

• A GitHub account with at least one repository

Setup Process:

• Install RepoGuard on your chosen repositories • RepoGuard immediately scans your codebase and reports findings • Review and merge any fix PRs opened by RepoGuard • Every subsequent push is automatically scanned

Permissions Required

• Repository contents: Read & write (to scan files and open fix PRs) • Issues: Read & write (to open security issues when PRs aren't possible) • Pull requests: Read & write (to open and manage fix PRs) • Checks: Read & write (to report scan status on commits)

Description from the GitHub Marketplace listing.