DevGhost analyzes a GitHub repository and produces:
- security and quality findings
- issue drafts you can copy into GitHub
- patch drafts as unified diffs
web- Next.js frontend (starter)api- FastAPI backendworker- Celery worker for async scansinfra- Docker Compose and local infra helpers
-
Start infrastructure:
docker compose -f infra/docker-compose.yml up -d
-
Start API:
cd api python3 -m venv .venv source .venv/bin/activate pip install -r requirements.txt uvicorn app.main:app --reload --port 8000
-
Start Worker:
cd worker python3 -m venv .venv source .venv/bin/activate pip install -r requirements.txt python -m app.worker
-
Start Web:
cd web npm install npm run dev
This is an initial scaffold with health/status endpoints and a simple scan job flow. Next steps include repo cloning, static analysis adapters, and LLM finding enrichment.