Spaces:
Sleeping
Sleeping
Update README with full description, API docs, and metadata
Browse files
README.md
CHANGED
|
@@ -1,12 +1,44 @@
|
|
| 1 |
---
|
| 2 |
-
title: Code Security Analyzer
|
| 3 |
-
emoji:
|
| 4 |
-
colorFrom:
|
| 5 |
colorTo: purple
|
| 6 |
sdk: gradio
|
| 7 |
-
sdk_version:
|
| 8 |
app_file: app.py
|
| 9 |
-
pinned:
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 10 |
---
|
| 11 |
|
| 12 |
-
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 1 |
---
|
| 2 |
+
title: Code Security Risk Analyzer
|
| 3 |
+
emoji: 🔒
|
| 4 |
+
colorFrom: red
|
| 5 |
colorTo: purple
|
| 6 |
sdk: gradio
|
| 7 |
+
sdk_version: 5.33.0
|
| 8 |
app_file: app.py
|
| 9 |
+
pinned: true
|
| 10 |
+
license: apache-2.0
|
| 11 |
+
tags:
|
| 12 |
+
- security
|
| 13 |
+
- vulnerability-detection
|
| 14 |
+
- owasp
|
| 15 |
+
- cwe
|
| 16 |
+
- code-analysis
|
| 17 |
+
- static-analysis
|
| 18 |
+
short_description: AI-powered code vulnerability detection with OWASP mapping
|
| 19 |
---
|
| 20 |
|
| 21 |
+
# 🔒 Code Security Risk Analyzer
|
| 22 |
+
|
| 23 |
+
AI-powered multi-label vulnerability detection across **30 CWE categories** mapped to **OWASP Top 10 2021**. Supports Python, JavaScript, Java, C, C++, PHP, and Go.
|
| 24 |
+
|
| 25 |
+
## Features
|
| 26 |
+
- **Detection Model:** [GraphCodeBERT classifier](https://huggingface.co/ayshajavd/graphcodebert-vuln-classifier) trained on 175K+ labeled code samples
|
| 27 |
+
- **Fix Generator:** [CodeT5+](https://huggingface.co/ayshajavd/codet5p-vuln-fixer) fine-tuned to suggest secure code replacements
|
| 28 |
+
- **Structured Reports:** CWE ID, OWASP category, severity score, exploit likelihood, plain English explanation
|
| 29 |
+
- **Attack Chain Analysis:** Multi-vulnerability chaining analysis
|
| 30 |
+
- **REST API:** JSON endpoint for integration into CI/CD pipelines
|
| 31 |
+
|
| 32 |
+
## API Usage
|
| 33 |
+
|
| 34 |
+
```python
|
| 35 |
+
from gradio_client import Client
|
| 36 |
+
|
| 37 |
+
client = Client("ayshajavd/code-security-analyzer")
|
| 38 |
+
report = client.predict(code="your code here", api_name="/get_json_report")
|
| 39 |
+
```
|
| 40 |
+
|
| 41 |
+
## Models & Dataset
|
| 42 |
+
- [graphcodebert-vuln-classifier](https://huggingface.co/ayshajavd/graphcodebert-vuln-classifier)
|
| 43 |
+
- [codet5p-vuln-fixer](https://huggingface.co/ayshajavd/codet5p-vuln-fixer)
|
| 44 |
+
- [code-security-vulnerability-dataset](https://huggingface.co/datasets/ayshajavd/code-security-vulnerability-dataset)
|