CloneGuard

What is CloneGuard?

CloneGuard is a command-line security scanner built in Go. It analyzes local folders and cloned repositories to detect malicious patterns before users execute any code. The tool operates in read-only mode and never runs, installs, or imports files from the target project.

It identifies common attack vectors such as credential theft, hidden network requests, obfuscated scripts, and automatic execution hooks like VS Code tasks or npm install scripts. Each finding includes the affected file, line number, code snippet, and a plain-language explanation of the risk.

The scanner supports machine-readable JSON output and uses exit codes to integrate easily into automation workflows or pre-commit hooks. It requires Go 1.24 or higher to build and has zero third-party dependencies.

CloneGuard features

• Scans local folders and git repositories for malicious code patterns
• Detects credential theft, hidden network calls, and auto-run hooks
• Operates in read-only mode without executing or importing project files
• Outputs detailed findings with file paths, line numbers, and explanations
• Provides JSON output and numeric exit codes for script integration
• Requires Go 1.24+ to build with zero third-party dependencies

Who uses CloneGuard and for what

• Reviewing take-home coding assignments from recruiters before running them
• Checking open-source packages downloaded from package registries
• Adding a pre-commit hook to block dangerous code from entering a repository
• Automating security checks in CI pipelines using JSON output and exit codes
• Auditing shared development environments for hidden credential-stealing scripts

CloneGuard FAQ

Comments (0)

Comments and upvotes open when this product launches on ProductPerch.