Low Severity
Published: Oct 29, 2026
Local-first security scanner for projects you are authorized to scan (code, Git history, local HTTP)
<p align="center">
<picture>
<source media="(prefers-color-scheme: dark)" srcset="docs/assets/brand/pgard-symbol-light.png" />
<img src="docs/assets/brand/pgard-symbol.png" alt="PGARD" width="120" />
</picture>
</p>
# PGARD
[](https://github.com/JadenMeister/pgard/actions/workflows/ci.yml)
[](LICENSE)
[](#requirements)
[](tsconfig.base.json)
[](#requirements)
[](#known-limitations)
[](#privacy-and-network-traffic)
[](https://github.com/JadenMeister/pgard/commits/main)
English | [한국어](README.ko.md)
PGARD (`pgard`) is a local security scanner for GitHub projects you are authorized to scan. It runs on your own computer as a command-line tool and a local web dashboard. It checks the current code and configuration, the Git history, and (optionally) a web service you run on `127.0.0.1`. Findings are decided from the code itself; scans do not download or query a vulnerability database (see [Code-based analysis](#code-based-analysis)). An optional, user-run command downloads public OSV data for later dependency checks (see [Privacy and network traffic](#privacy-and-network-traffic)).
Before every scan, PGARD checks that the repository owner approved PGARD, that you