# Show HN: Free GitHub Action that scans PR diffs for malicious code, not quality

> Source: <https://github.com/marketplace/actions/vigil-pr-scanner>
> Published: 2026-09-18 03:20:54+00:00

I watched a video recently on malicious code injection into OSS repo PRs and how they can go undetected because of how well they're hidden and decided to do a project for this. This tool is essentially used in unison with ai code review bots like greptile. While tools like greptile reason because they run with LLMs, this is a deterministic step before greptile that scans for malicious code (command execution, credential access, exfil, auto-run hooks, obfuscation, and prompt injection; regex + semgrep, no LLM), then can trigger the ai code reviewer like greptile or coderabbit, pointing it to its findings.

It's free/MIT and runs in your CI.

Comments URL: [https://news.ycombinator.com/item?id=49749862](https://news.ycombinator.com/item?id=49749862)

Points: 1

# Comments: 0