argus-code-scanning

Issues somebody may already be working on are listed last. List everything by date

• [Tracking] Detect unprotected endpoints and broken access control

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement help wanted

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  argus-code-scanning/argus-codescan-mcp#120 · Opened Oct 27, 2026

  Maintainers usually reply within 1 day

• [Access control] Detect routes with no authentication (design: bundled Semgrep rules)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement help wanted question

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  argus-code-scanning/argus-codescan-mcp#119 · Opened Oct 27, 2026

  Maintainers usually reply within 1 day

• [Access control] Flag exposed admin/debug endpoints (Actuator *, H2 console, pprof, GraphQL introspection)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement help wanted

  Difficulty 5/5 Over a week Newbie friendliness 38/100

  argus-code-scanning/argus-codescan-mcp#118 · Opened Oct 27, 2026

  Maintainers usually reply within 1 day

• [Access control] Detect JWTs decoded without signature verification (PyJWT, jsonwebtoken, jjwt, golang-jwt)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement good first issue help wanted

  Difficulty 4/5 1-2 days Newbie friendliness 54/100

  argus-code-scanning/argus-codescan-mcp#117 · Opened Oct 27, 2026

  Maintainers usually reply within 1 day

• [Access control] Rails, Laravel, Node: flag skipped auth, withoutMiddleware('auth'), reflective CORS with credentials

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement help wanted

  Difficulty 4/5 3-5 days Newbie friendliness 55/100

  argus-code-scanning/argus-codescan-mcp#116 · Opened Oct 27, 2026

  Maintainers usually reply within 1 day

• [Access control] Spring and .NET: flag permitAll() on everything, @PermitAll, [AllowAnonymous]

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement help wanted

  Difficulty 3/5 1-2 days Newbie friendliness 67/100

  argus-code-scanning/argus-codescan-mcp#115 · Opened Oct 27, 2026

  Maintainers usually reply within 1 day

• [Access control] Python: flag AllowAny, empty authentication_classes, @csrf_exempt

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement good first issue help wanted

  Difficulty 3/5 1-2 days Newbie friendliness 72/100

  argus-code-scanning/argus-codescan-mcp#114 · Opened Oct 27, 2026

  Maintainers usually reply within 1 day

• [CLI] Explain when --fail-on fails on findings hidden by --classification

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement good first issue help wanted

  Difficulty 2/5 1-3 hours Newbie friendliness 88/100

  argus-code-scanning/argus-codescan-mcp#113 · Opened Oct 27, 2026

  Maintainers usually reply within 1 day

• [Deps] Upgrade vitest and @vscode/vsce (dev-only CVEs); drop Node 18 from CI

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement help wanted

  Difficulty 4/5 3-5 days Newbie friendliness 45/100

  argus-code-scanning/argus-codescan-mcp#112 · Opened Oct 27, 2026

  Maintainers usually reply within 1 day

• [Docker] Add govulncheck and composer to the image

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement good first issue help wanted

  Difficulty 3/5 1-2 days Newbie friendliness 74/100

  argus-code-scanning/argus-codescan-mcp#111 · Opened Oct 27, 2026

  Maintainers usually reply within 1 day

• [npm] scan sca: audit every project in a monorepo and mark runtime vs dev

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement help wanted

  Difficulty 4/5 3-5 days Newbie friendliness 55/100

  argus-code-scanning/argus-codescan-mcp#110 · Opened Oct 27, 2026

  Maintainers usually reply within 1 day

• [Rules] command-injection flags safe subprocess calls with argument lists

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug help wanted

  Difficulty 4/5 3-5 days Newbie friendliness 58/100

  argus-code-scanning/argus-codescan-mcp#109 · Opened Oct 27, 2026

  Maintainers usually reply within 1 day

• [Rules] sql-concat flags any line containing SELECT/UPDATE/DELETE (43 false positives on Argus itself)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug help wanted

  Difficulty 4/5 3-5 days Newbie friendliness 54/100

  argus-code-scanning/argus-codescan-mcp#108 · Opened Oct 27, 2026

  Maintainers usually reply within 1 day

• 👋 Contributors welcome: start here

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  documentation good first issue help wanted

  Difficulty 1/5 Under an hour Newbie friendliness 20/100

  argus-code-scanning/argus-codescan-mcp#103 · Opened Oct 27, 2026

  Maintainers usually reply within 1 day

• [Data Policy] Scan artifact retention and --no-persist for local JSON

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement

  Difficulty 4/5 3-5 days Newbie friendliness 48/100

  argus-code-scanning/argus-codescan-mcp#60 · 1 comment · Opened Aug 31, 2026

  Maintainers usually reply within 1 day

• [AI] MCP tool: sanitize_report for safe sharing with LLM clients

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement help wanted

  Difficulty 4/5 3-5 days Newbie friendliness 48/100

  argus-code-scanning/argus-codescan-mcp#59 · Opened Aug 31, 2026

  Maintainers usually reply within 1 day

• [Compliance] HIPAA PHI handling checks in application and infra code

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement good first issue help wanted

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  argus-code-scanning/argus-codescan-mcp#58 · Opened Aug 31, 2026

  Maintainers usually reply within 1 day

• [Data Policy] Cloud upload: sanitize findings before POST to dashboard

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement help wanted

  Difficulty 4/5 1-2 days Newbie friendliness 48/100

  argus-code-scanning/argus-codescan-mcp#56 · Opened Aug 31, 2026

  Maintainers usually reply within 1 day

• [Privacy] GDPR and CCPA static rule pack

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement good first issue help wanted

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  argus-code-scanning/argus-codescan-mcp#55 · Opened Aug 31, 2026

  Maintainers usually reply within 1 day

• [Data Policy] argus.yml data handling policy: upload, retention, and field controls

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement help wanted

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  argus-code-scanning/argus-codescan-mcp#54 · Opened Aug 31, 2026

  Maintainers usually reply within 1 day

• [Privacy] Built-in PII scanner: emails, phones, SSN, names in code and config

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement help wanted

  Difficulty 5/5 Over a week Newbie friendliness 25/100

  argus-code-scanning/argus-codescan-mcp#52 · Opened Aug 31, 2026

  Maintainers usually reply within 1 day

• [Data Policy] PII and sensitive-data redaction in reports, JSON, and SARIF

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement help wanted

  Difficulty 5/5 Over a week Newbie friendliness 32/100

  argus-code-scanning/argus-codescan-mcp#53 · 1 comment · Opened Aug 31, 2026

  Maintainers usually reply within 1 day

• [AI] Batch apply_fix with diff preview for autofixable findings

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement help wanted

  Difficulty 4/5 1-2 days Newbie friendliness 48/100

  argus-code-scanning/argus-codescan-mcp#40 · Opened Jul 30, 2026

  Maintainers usually reply within 1 day

• [CI/CD] GitLab CI template and MR scan integration

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement help wanted

  Difficulty 2/5 1-3 hours Newbie friendliness 68/100

  argus-code-scanning/argus-codescan-mcp#41 · Opened Jul 30, 2026

  Maintainers usually reply within 1 day

• [CI/CD] Pre-commit hook for secrets and quick SAST on staged files

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement

  Difficulty 2/5 1-3 hours Newbie friendliness 58/100

  argus-code-scanning/argus-codescan-mcp#42 · 1 comment · Opened Jul 30, 2026

  Maintainers usually reply within 1 day

• [AI] Docs: AI assistant prompt cookbook for Argus MCP

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  documentation enhancement

  Difficulty 2/5 1-3 hours Newbie friendliness 76/100

  argus-code-scanning/argus-codescan-mcp#39 · Opened Jul 30, 2026

  Maintainers usually reply within 1 day

• [CI/CD] Reusable composite action: argus-code-scanning/argus-scan

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement help wanted

  Difficulty 4/5 3-5 days Newbie friendliness 48/100

  argus-code-scanning/argus-codescan-mcp#37 · Opened Jul 30, 2026

  Maintainers usually reply within 1 day

• [CI/CD] Cloud dashboard upload in GitHub Actions (ARGUS_API_KEY secret)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement help wanted

  Difficulty 2/5 1-3 hours Newbie friendliness 66/100

  argus-code-scanning/argus-codescan-mcp#34 · Opened Jul 30, 2026

  Maintainers usually reply within 1 day

• [CI/CD] Scheduled nightly security scan workflow

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement good first issue help wanted

  Difficulty 4/5 1-2 days Newbie friendliness 44/100

  argus-code-scanning/argus-codescan-mcp#35 · Opened Jul 30, 2026

  Maintainers usually reply within 1 day

• [AI] VS Code: Ask AI to fix — copy finding context to prompt

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement help wanted

  Difficulty 2/5 1-3 hours Newbie friendliness 76/100

  argus-code-scanning/argus-codescan-mcp#31 · Opened Jul 30, 2026

  Maintainers usually reply within 1 day

• [Tracking] Codebase audit follow-ups (PR #5 fixed items + open work)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement

  Difficulty 5/5 Over a week Newbie friendliness 15/100

  argus-code-scanning/argus-codescan-mcp#16 · Opened Jul 16, 2026

  Maintainers usually reply within 1 day

• [Feature] Add integration tests for CLI, MCP server, and --fail-on CI behavior

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement help wanted

  Difficulty 3/5 1-2 days Newbie friendliness 58/100

  argus-code-scanning/argus-codescan-mcp#12 · Opened Jul 16, 2026

  Maintainers usually reply within 1 day

• [Feature] Align release versions across python, languages, and npm packages

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement help wanted

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  argus-code-scanning/argus-codescan-mcp#11 · Opened Jul 16, 2026

  Maintainers usually reply within 1 day

• [Local Review] Docs + cookbook prompts for local code review

  Possibly taken @OkiriGabriel claimed this 13 days ago. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  documentation enhancement good first issue help wanted

  argus-code-scanning/argus-codescan-mcp#82 · 1 comment · 1 assignee · Opened Oct 15, 2026

  Maintainers usually reply within 1 day

• [good first issue] Add malware rule for curl|bash download cradles

  Possibly taken @harinib0309 claimed this 14 days ago. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement good first issue help wanted

  Difficulty 2/5 1-3 hours Newbie friendliness 86/100

  argus-code-scanning/argus-codescan-mcp#67 · 2 comments · 1 assignee · Opened Oct 11, 2026

  Maintainers usually reply within 1 day

• [Compliance] PCI-DSS cardholder data exposure checks

  Possibly taken @OpeyemiAdeniji claimed this 16 days ago. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement

  Difficulty 5/5 Over a week Newbie friendliness 38/100

  argus-code-scanning/argus-codescan-mcp#63 · 7 comments · 1 assignee · Opened Aug 31, 2026

  Maintainers usually reply within 1 day