patchd.dev installs statistics

Security analysis for AI-generated code.

Capabilities

• Scans every pull request for security vulnerabilities • Returns findings in plain English with exact, copy-pasteable fixes, built for founders who didn't write the code

themselves

• Posts inline PR comments per file and a summary table across all changed files • Creates a pass/fail check run that can block merging until critical issues are resolved • Supports Python, JavaScript, TypeScript, Go, Java, PHP, Ruby, Rust, Bash, SQL, and more

Benefits

• Ship securely without a security team: Patchd catches the vulnerabilities that AI coding tools introduce but never flag, before they reach production • Zero configuration: One API key, one workflow file, and every future PR is covered automatically • Plain English explanations: Every finding includes what the issue is, how an attacker would exploit it, the

business impact, and the exact fix, no security background required

Getting Started

Requirements:

• A Patchd account, sign up at patchd.dev • A GitHub repository with Actions enabled

Setup Process:

• Sign up at patchd.dev → go to Settings → API Keys → create a key • In your GitHub repo go to Settings → Secrets and variables → Actions → add a secret named PATCHD_API_KEY with

your key

• Create .github/workflows/patchd.yml in your repo:

```yaml

name: Patchd Security Scan

on:

pull_request:

types: [opened, synchronize, reopened]

permissions:

contents: read

pull-requests: write

checks: write

jobs:

patchd-scan:

runs-on: ubuntu-latest

steps:

- uses: Afeez1131/patchd-action@v1.0.6

with:

api_key: ${{ secrets.PATCHD_API_KEY }}

```

That's it, every future PR will be scanned automatically.

Description from the GitHub Marketplace listing.