GitHub Advanced Security (Code Scanning)

GitHub's native Code Scanning, powered by CodeQL, is an essential tool for any GitHub-based project. It automatically scans your code for security vulnerabilities and coding errors. While it is not a 'generative AI' in the same way as other tools on this list, its ability to perform deep semantic analysis is world-class. It is free for all public repositories, making it the most accessible security tool for open-source developers.

It integrates directly into the PR workflow, providing clear alerts and remediation suggestions for every detected issue.