Improved Secret & Vulnerability Scanning Using AI

GitProxy currently has built-in support for `gitleaks`, but configuring and maintaining it can be cumbersome. The default git-proxy configuration allows certain issues — such as credentials embedded in database URLs — to slip through undetected.

We’ve implemented an alternative scanning approach that uses GPT-5 Codex (you can define the model in the config) to detect security problems more reliably.

Our implementation extracts and reports:

- Vulnerability type
- File path
- Line numbers and a relevant code snippet
- Explanation of why this is a security issue
- Suggested fix

This has been effective in catching issues and informing the user what is wrong and how to resolve it.

I can open a PR to share this implementation if there’s interest from the community.