{"slug": "timecodesecurity-deterministic-ast-sast-and-auto-remediation-for-python", "title": "TimeCodeSecurity – Deterministic AST SAST and Auto-Remediation for Python", "summary": "Developer Ayush Gaur released TimeCodeSecurity (TCS), an open-source static application security testing (SAST) engine for Python that uses deterministic Abstract Syntax Tree (AST) taint tracking instead of regex patterns or LLMs. TCS tracks dataflow from function parameters into sensitive execution sinks including subprocess.run, raw SQL cursors, and path operations, and validates remediation patches via AST syntax compilation and in-memory re-scanning before writing to disk, running in roughly 700ms per scan. The tool is installable via pip from its GitHub repository and was posted to Hacker News, where it received 2 points and 0 comments.", "body_md": "Hi Hacker News! I built TimeCodeSecurity (TCS), an open-source static security engine for Python.\n\nMost existing open-source SAST tools rely on regex patterns or LLMs, leading to high false-positive rates and alert fatigue. TCS takes a compiler-level deterministic approach: it parses Python's Abstract Syntax Tree (AST) and tracks dataflow from function parameters directly into sensitive execution sinks (subprocess.run, raw SQL cursors, and path operations).\n\nKey highlights: - Deterministic AST taint tracking (Zero regex / Zero AI guessing) - Closed-loop remediation: Patches are validated via AST syntax compilation and re-scanned in-memory before touching disk - Chronological visual proof graphs: Source -> Taint -> Sink - Sub-second execution (~700ms)\n\nYou can run it directly in your terminal:\n\n```\n  pip install git+https://github.com/kushigaur3103-svg/time-code-security.git\n  tcs scan ./your_project --fix\n```\n\nGitHub: https://github.com/kushigaur3103-svg/time-code-security\nWould love feedback on the AST traversal and in-memory verification approach! https://github.com/kushigaur3103-svg/time-code-security And that's my linkdin link https://www.linkedin.com/in/ayush-gaur-1488b1420?utm_source=share_via&utm_content=profile&utm_medium=member_android\n\nComments URL: [https://news.ycombinator.com/item?id=49765426](https://news.ycombinator.com/item?id=49765426)\n\nPoints: 2\n\n# Comments: 0", "url": "https://wpnews.pro/news/timecodesecurity-deterministic-ast-sast-and-auto-remediation-for-python", "canonical_source": "https://news.ycombinator.com/item?id=49765426", "published_at": "2026-09-19 10:59:22+00:00", "updated_at": "2026-09-19 11:24:57.152337+00:00", "lang": "en", "topics": ["developer-tools", "ai-tools"], "entities": ["TimeCodeSecurity", "Ayush Gaur", "Python", "GitHub", "Hacker News"], "alternates": {"html": "https://wpnews.pro/news/timecodesecurity-deterministic-ast-sast-and-auto-remediation-for-python", "markdown": "https://wpnews.pro/news/timecodesecurity-deterministic-ast-sast-and-auto-remediation-for-python.md", "text": "https://wpnews.pro/news/timecodesecurity-deterministic-ast-sast-and-auto-remediation-for-python.txt", "jsonld": "https://wpnews.pro/news/timecodesecurity-deterministic-ast-sast-and-auto-remediation-for-python.jsonld"}}