Evident
A repository security scanner orchestrator for Node.js and TypeScript projects. It brings Semgrep, Trivy, TruffleHog and npm audit into one deduplicated report, preserves scanner attribution, and compares findings against a baseline for CI. Its initial SOC 2 mapping evaluates technical evidence only; it does not certify compliance.
- Year
- 2026
- Platform
- CLI
- Type
- Personal
- Status
- Shipped
What it does
- Detects frameworks, CI/CD, Docker and monorepo setups in Node.js and TypeScript repos
- Normalizes findings from several scanners into one model
- De-duplicates by fingerprint while keeping every source
- Terminal, JSON, HTML and SARIF 2.1.0 reports
- Fingerprint baselines for regression comparisons
- Changed-file scans and severity policies that can target only new findings
- Native repository and CI/CD checks without external scanners
- Missing required scanners reported as incomplete coverage, not a pass
Built with
- Typescript
- NodeJS