ScrutoraWhat it covers, and what it does not.
Every figure here is generated from the scanner rather than written by hand, and a test fails the build if anyone types one back in.
Stated first, not in a footnote.
Java, Python and JavaScript get the deepest analysis. Others are supported and detect less. A language on the list is not a promise of equal depth.
A call whose target the program computes at runtime cannot be followed. The scan reports how many it could not resolve rather than omitting them.
Training, minutes, appointments, assessments. No scanner evidences these and we do not imply otherwise.
This reads code and configuration. It does not attack a running system, and it is not a substitute for something that does.
12 languages, 11 infrastructure formats.
JavaScript and TypeScript share a parser and count once. PL/SQL is counted separately because it is a distinct grammar rather than a dialect.
By how many rules cite them.
See what it finds in yours.
A public repository, read once and not kept. You get the data map: every personal-data field, where it lands, and who receives it. Or run the container on your own runner, and the source never reaches us.