SecurePatch
Automated security scans, with every finding tracked until it's fixed.
My final-year major project. It runs Semgrep and Bandit scans from a Node.js pipeline and detects five kinds of vulnerabilities: SQL injection, command injection, exposed secrets, SSRF and path traversal. The findings land in a dashboard where each one can be triaged.
- Scans run in background workers using BullMQ and Redis, and findings are deduplicated with SHA-256 fingerprints so the same issue isn't reported twice.
- I built 25 REST API endpoints in 7 route groups with Express and MongoDB, including owner, admin and developer roles and Google OAuth 2.0 login.
- The React dashboard has 6 pages and 23 components for triage, and I wrote 22 Jest and Supertest integration tests.
