Core-limited worker pool for concurrent scans. Supports OpenGrep, Trivy, Bandit, Brakeman, Gostaticcheck, Fraunhoffer CPG, Joern.
Enhance security findings with AI context using OpenAI-compatible endpoints and swappable models.
Unified JSON/SARIF/HTML formats with smart deduplication and finding collapsing.
Usage Examples
# Run parallel scan with 8 jobs
./checkmate-go --code-dir ./src --strategy parallel --jobs 8
# Full report with LLM enrichment
./checkmate-go \
--code-dir ./project \
--llm-enrich \
--llm-model gpt-4o-mini \
--sarif-out results.sarif \
--html-out results.html
Strategies & Tools
- ✓ Sequential: Predictable one-by-one execution.
- ✓ Parallel: High-speed concurrent worker pool.
-
✓
Auto-Install: Install missing tools via
--install-missing.