CyfroCode provides a comprehensive SAST code-security workspace embedded directly within CyfroSec. Designed for developers and security teams alike, it allows you to connect your code repositories, automatically run security scans, and generate actionable remediation patches, all without leaving the platform.
CyfroCode supports 7 programming languages for SAST code-security scanning, plus 5 infrastructure/configuration surfaces, dead-code detection, and Logic Map / Mind Map views for understanding architecture faster.
The CyfroCode overview: posture headline, risk score, severity mix, and a stacked findings trend across repositories.
Programming Languages
| Language | Extensions |
|---|---|
| Python | .py |
| JavaScript | .js |
| TypeScript | .ts |
| Java | .java |
| Go | .go |
| C# | .cs |
| C++ | .cpp, .cc, .hpp |
Infrastructure / Configuration Surfaces
- Container (Dockerfile)
- Terraform (IaC)
- Kubernetes (manifests)
- YAML (generic config)
- CI (GitHub Actions workflows)
In This Section
The CyfroCode guide is split into focused pages so you can jump straight to the task at hand:
- Connecting GitHub & Repositories — install the GitHub App and manage your synced repositories.
- Running Scans & Scan Tabs — queue scans and understand the scan detail tabs.
- Findings & AI Patches — triage findings, read AI explanations, and generate remediation patches.
- Logic Map & Mind Map — explore code relationships and API endpoint trees.
- Code Health, SBOM & Intent — review dead code, dependency inventory, and architecture intent.