# Bugsy

A command-line tool that runs SAST scans or reads existing scan reports from tools such as Checkmarx, CodeQL, Fortify or Snyk, then produces automatic code fixes for the vulnerabilities it can remediate.

Bugsy is the free, community edition of Mobb, a vendor-agnostic automatic security-vulnerability remediation tool. It runs in two modes: Scan, which uses Checkmarx or Snyk to run a static-analysis scan of a public GitHub, GitLab or Azure DevOps repository, and Analyze, which reads a SAST report the user already generated with Checkmarx, CodeQL, Fortify or Snyk.

In either mode, Bugsy identifies which reported vulnerabilities can be remediated automatically, generates the code fixes, and sends the developer to a fix-report page on the Mobb platform to review and commit them. It runs from the command line through npx, does not itself detect vulnerabilities, and in its community form only analyzes public repositories, with private-repository analysis available for a limited time.

Website: https://mobb.ai