mycop 0.3.1

AI Code Security Scanner — detect vulnerabilities in AI-generated code
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43

use anyhow::Result;

use crate::rules::matcher::Finding;

/// Available AI providers in priority order
#[derive(Debug, Clone)]
pub enum AiProvider {
    ClaudeCli,
    AnthropicApi(String), // API key
    OpenAiApi(String),    // API key
    Ollama,
    RuleBasedOnly,
}

impl std::fmt::Display for AiProvider {
    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
        match self {
            AiProvider::ClaudeCli => write!(f, "Claude CLI"),
            AiProvider::AnthropicApi(_) => write!(f, "Anthropic API"),
            AiProvider::OpenAiApi(_) => write!(f, "OpenAI API"),
            AiProvider::Ollama => write!(f, "Ollama (local)"),
            AiProvider::RuleBasedOnly => write!(f, "Rule-based only (offline)"),
        }
    }
}

/// Trait for all AI backends
pub trait AiBackend: Send + Sync {
    /// Explain a vulnerability finding
    fn explain(&self, finding: &Finding, code_context: &str) -> Result<String>;

    /// Deep review an entire file for security issues
    fn deep_review(&self, file_content: &str, language: &str) -> Result<String>;

    /// Fix an entire file: send full content + all findings, get back fixed file
    fn fix_file(
        &self,
        file_path: &str,
        language: &str,
        file_content: &str,
        findings: &[&Finding],
    ) -> Result<String>;
}