Skip to main content

Security Review

CoStrict Security is a self-developed AI-powered security scanning tool that helps developers quickly identify security vulnerabilities and risks in their code.

Installation Guide​

For detailed download and installation steps, please visit: https://costrict.ai/download

Three installation methods are supported:

  • CLI Command Line Tool (version requirement: >= 3.0.15)
  • VSCode Plugin (version requirement: >= 2.4.7)
  • JetBrains Plugin (version requirement: >= 2.4.7, supports IDEA / PyCharm / WebStorm, etc.)

Usage​

Step 1: Enter Interactive Window​

Enter the following command in the terminal to start CoStrict:

cs

Step 2: Select Scan Target​

After entering the security scan, the system will ask you what you want to scan:

OptionDescription
Current directoryScan the current directory
Specific fileScan a specific file
Specific directoryScan a specific directory

Step 3: View Scan Report​

After the scan is complete, the system generates a detailed security scan report, including:

  • Scan Summary: The number of files scanned and the total number of issues found
  • Issue List: Detailed information for each security issue
    • File path and line number
    • Severity level
    • Issue description
    • Fix suggestions

Private Deployment Requirements​

Model Configuration​

Conversation Model (shared by CoStrict Conversation, Code Review, and Security Review)

Model NameGPU Resources (Recommended)
GLM-4.7-FP8 or GLM-4.7-Flash4 x H20 or 4 x RTX4090

Backend Server Requirements​

Hardware Requirements

ConfigurationMinimum Requirements
CPUIntel x64 architecture, 16 cores
Memory32GB RAM
Storage512GB available space

Software Requirements

SoftwareVersion Requirements
Operating SystemCentOS 7+ or Ubuntu 18.04+
Docker20.10+
Docker Compose2.0+

Deployment Documentation​

For detailed deployment steps, please refer to: Deployment Checklist

Get Help​