Code Inspector

Code Inspector is an AI-based code analysis tool that validates repositories against the byte AppDev Standard, a requirement catalogue derived from the BSI IT-Grundschutz-Kompendium covering software development, web application security, containerization, and software testing/release practices.

An LLM-based agent inspects a repository one requirement at a time, using read-only tools (directory listing, file search, content search, file reading, lines-of-code counting) to gather evidence. For each requirement it returns a structured verdict (fulfilled / partially fulfilled / not fulfilled / not applicable), a one-line summary, a detailed Markdown report with evidence, and concrete recommendations.

The tool runs in two modes: a local CLI for a single check against a filesystem path, and a cloud mode (FastAPI + background workers) for triggering checks from a CI/CD pipeline and publishing consolidated PDF reports. A Docker Compose setup lets anyone run the full cloud stack without Kubernetes.