Securie for Cody — security guardrails for Sourcegraph Cody-generated code

roadmap

Sourcegraph Cody is the AI-pair-coding tool with deep code-graph context. The code-graph context can help Cody avoid some bug classes (it sees how a function is used elsewhere) but doesn't replace dedicated security review. Securie's specialists run on the diff regardless of editor.

Updated

What it does

Same editor-agnostic specialist pipeline. Cody's code-graph context gives Securie's intent-graph (`crates/intent-graph`) cleaner cross-function taint signals; the two layers complement.

When to use it

Teams using Cody for production code, especially in larger repos where the code-graph context is most valuable.

Limitations

Roadmap. Sourcegraph-Cody plugin integration is post-GA.

Install

  1. Install Securie GitHub App on the repo Cody operates on
  2. Add `.cody/` to .gitignore
  3. Push any Cody-edited commit; Securie reviews on the PR

Listed on

Sourcegraph Cody →