Show HN: Patchsmith – Agentic wrapper for CodeQL (finetune, triage, fix with AI)
github.comThis is the little experiment I did here, building an AI-SAST by wrapping CodeQL with an agentic layer. It makes it so easy to use CodeQL that I’m now revisiting past projects and discovering quite a few surprises!
The agent is used to:
- write custom codeql queries based on the code and a prompt
- triage SARIF output and group issues, extract most important ones
- investigate issues for risk, false positive, etc
- prepare pull requests with fixes
Github: https://github.com/eschnou/patchsmith
Blog post with more details: https://blog.transcode.be/patchsmith-ai-codeql-cli/
What other interesting open source tool could benefit from a AI driven UI/UX wrapper layer?