kid25/code-security-analyzer

🔒 Code Security Risk Analyzer v2

AI-powered multi-label vulnerability detection across 30 CWE categories mapped to OWASP Top 10 2021. Supports Python, JavaScript, Java, C, C++, PHP, and Go.

v2 Improvements

• —Per-class threshold optimization — each CWE has its own optimal detection threshold (not global 0.3)
• —Temperature-calibrated probabilities — confidence scores are meaningful (0.8 ≈ 80% true positive rate)
• —CWE-aware fix generation — fixer model knows what vulnerability to fix
• —3.7x larger fixer model — CodeT5+ 220M (was flan-t5-small 60M)
• —Asymmetric Loss training — handles 90% safe class imbalance

Model Performance

Features

• —Detection Model: GraphCodeBERT classifier — 125M params, two-phase training with ASL loss
• —Fix Generator: CodeT5+ 220M — CWE-aware input format, beam search generation
• —Structured Reports: CWE ID, OWASP category, severity score, exploit likelihood, plain English explanation
• —Attack Chain Analysis: Multi-vulnerability chaining analysis
• —REST API: JSON endpoint for integration into CI/CD pipelines

API Usage

from gradio_client import Client

client = Client("ayshajavd/code-security-analyzer")

# Get markdown report
report = client.predict(code="your code here", api_name="/analyze")

# Get structured JSON report
json_report = client.predict(code="your code here", api_name="/get_json_report")

Models & Dataset

• —graphcodebert-vuln-classifier — Multi-label CWE detection
• —codet5p-vuln-fixer — Vulnerability fix generation
• —code-security-vulnerability-dataset — 175K labeled samples

Training Notebooks

All training code: vuln-classifier-training-notebooks