Navigate shadscan and copy common commands.
A quick, no-install taste of Shadscan: paste a public GitHub repository and get the same deterministic score, evidence, and fixes the CLI produces. Web scans reach public repositories only and cap out at roughly 32 MiB of source and 10,000 files — larger scans are queued and can take a while or fail.
For real work, run the CLI instead. It scans private code locally without uploading anything, has no web size ceiling, runs in CI with --fail-under, and works best with AI agents: generate a remediation handoff with --prompt, let your agent fix the findings, and rescan to verify. The docs cover the full agent workflow.