Skip to main content

Security Review

CoStrict Security is a self-developed AI-powered security scanning tool that helps developers quickly identify security vulnerabilities and risks in their code.

Installation Guide​

For detailed download and installation steps, please visit: https://costrict.ai/download

Three installation methods are supported:

  • CLI Command Line Tool (version requirement: >= 3.0.15)
  • VSCode Plugin (version requirement: >= 2.4.7)
  • JetBrains Plugin (version requirement: >= 2.4.7, supports IDEA / PyCharm / WebStorm, etc.)

Usage​

Step 1: Select Scan Method​

Method 1: Scan an Entire File

In the file explorer, right-click on a file and select CoStrict - Security Review to perform a security scan on the entire file.

Method 2: Scan Selected Code Snippet

In the editor, select a code snippet, then right-click and choose Security Review to scan the selected code.

Method 3: Scan Code Changes

Click the CoStrict icon on the left sidebar, switch to the CODE REVIEW page, and select Security Review to scan code changes in the current workspace (such as Git diffs).

Step 2: View Scan Report​

After the scan is complete, results are displayed in the sidebar panel, including:

  • Scan Summary: The number of files scanned and the total number of issues found
  • Issue List: Detailed information for each security issue
    • File path and line number
    • Severity level
    • Issue description
    • Fix suggestions

Private Deployment Requirements​

Model Configuration​

Conversation Model (shared by CoStrict Conversation, Code Review, and Security Review)

Model NameGPU Resources (Recommended)
GLM-4.7-FP8 or GLM-4.7-Flash4 x H20 or 4 x RTX4090

Backend Server Requirements​

Hardware Requirements

ConfigurationMinimum Requirements
CPUIntel x64 architecture, 16 cores
Memory32GB RAM
Storage512GB available space

Software Requirements

SoftwareVersion Requirements
Operating SystemCentOS 7+ or Ubuntu 18.04+
Docker20.10+
Docker Compose2.0+

Deployment Documentation​

For detailed deployment steps, please refer to: Deployment Checklist

Get Help​