🛡️ v0.1.0 — By Jay & PixelCity

Interactive Project
Auditor

Scan once, explore forever. One report covering build errors, dependency conflicts, and security vulnerabilities — ranked by real severity.

Install PixelGuard View on GitHub
Go
Language
MIT
License
OSV
Security Feed
TUI
Interface
terminal — pixelguard
$ pixelguard scan ./my-java-project

🔍 Scanning project structure...
✔ Detected: Maven project (Java 17, pom.xml found)
✔ 187 source files, 42 declared dependencies, 118 resolved

Build: 0 errors, 3 warnings
Conflicts: 2 dependency version conflicts
Security: 5 findings — 1 Critical, 2 High, 2 Medium

> report --severity critical
[1] CRITICAL — jackson-databind:2.14.0
    CVE-2023-35116: Remote code execution via polymorphic deserialization
    Fix: upgrade to 2.15.3+ (non-breaking patch update)

✔ Report exported to pixelguard-report.json

Built for Real Workflows

Not just a scanner. A complete audit system.

📦

Full Project Ingestion

Reads pom.xml, build.gradle, source tree, and build logs. Detects project type automatically.

🔗

Dependency Graph Resolution

Surfaces diamond dependency problems. Resolves transitive conflicts and version mismatches.

🛡️

Security Composition Analysis

Cross-references every resolved dependency against OSV.dev vulnerability feed. Real CVEs, not guesses.

🔧

Build Log Analysis

Parses Maven and Gradle compiler output. Extracts real errors, distinguishes failures from warnings.

💻

Interactive TUI

Live scan progress, then queryable findings. Drill into details, filter by severity, explore fixes.

📊

Exportable Reports

JSON, Markdown, SARIF. CI/CD pipeline ready. Same engine, interactive or headless.

Interactive Terminal UI

Scan once, then explore without re-running.

PixelGuard Interactive Report

Executive Summary

Project: /home/user/my-java-project
Type: Maven | Files: 187 | Dependencies: 118
Scan duration: 2.4s

Summary

Build Errors 0
Dependency Conflicts 2
Critical Security 1
High Security 2
Medium Security 2
Low Security 0

Findings

▸ 🔴 [Critical] Remote code execution via deserialization
     🟠 [High] Prototype pollution in JSON parser
     🟠 [High] SQL injection in query builder
Project: Maven │ Findings: 5 │ Phase: Findings

Architecture

Clean Go package layout, built for extensibility.

pixelguard/ ├── cmd/pixelguard/main.go # CLI entry point (cobra) ├── internal/ │ ├── types/ # Shared types (Severity, Dependency, Report) │ ├── parser/ │ │ ├── parser.go # Maven pom.xml + Gradle build.gradle parsers │ │ └── parser_test.go # Parser tests │ ├── resolver/ │ │ ├── graph.go # Dependency graph resolver + transitive simulation │ │ └── graph_test.go # Resolver tests │ ├── analyzer/ │ │ ├── build.go # Build log analyzer (Java/Gradle error patterns) │ │ └── security.go # OSV.dev SCA connector │ ├── engine/ │ │ └── engine.go # Orchestrator (progress callbacks, phased scan) │ ├── report/ │ │ └── report.go # Export: JSON, Markdown, SARIF │ └── ui/ │ ├── banner.go # Colored CLI output helpers │ └── tui.go # Interactive Bubbletea TUI └── AGENT_PROMPT.md # AI analysis agent system prompt