Skip to content

BUZZ

⚡ Buzz is an autonomous, codebase security auditor/mapper and Pull Request remediator powered by Gemini 4 Argon’s 1M-token context window.

Code Video Cerebral Valley

Core trick

Loads the full repo into one long-context call and cross-checks manifests and source against CVE records, then opens GitHub PRs with patches.

Tags

securitydev tools

Description

⚡ Buzz is an autonomous, codebase security auditor/mapper and Pull Request remediator powered by Gemini 4 Argon’s 1M-token context window. The Problem It Solves Traditional security scanners only inspect files or dependency manifests in isolation - generating noisy false positives, missing cross-file vulnerabilities, and leaving developers to manually trace code and write fixes. How Buzz Solves It 1. 1M-Context Full-Repo Auditing: Connects to GitHub via Supabase Auth, loads your entire repository into Gemini 4 Argon's 1M context window (with auto-compaction at 1M tokens), and cross-references your manifests and source code against 1,220+ live CVEProject/cvelistV5 records in Supabase Postgres to deliver a clear Security Health Score (0–100) and Grade (A–F). 2. 1-Click Pull Request Remediation: Synthesizes surgical fixes for discovered vulnerabilities, automatically branches or forks the repository, and opens ready-to-merge GitHub Pull Requests in one click. 3. Visual System Design Diagrams & Agentic Chat: Generates interactive component-flow architecture diagrams and includes a "Talk to Buzz" assistant that answers codebase questions, suggests patches, and executes PR creation directly from chat. Try it out: https://buzz-pied.vercel.app/ Built With: Gemini 4 Argon • Rust Vercel Serverless Functions • Supabase Postgres & GitHub OAuth • HTML + HTMX + Custom Pixel-Art SVG Animations.
nisargap/buzz★ 11 forksRustCreated Oct 25, 2026 · last push Oct 26, 2026

README excerpt

# ⚡ Buzz — Gemini 4 Argon Pixel CVE Code Auditor

**Buzz** is a pixel-art styled code auditing web application built for the Google DeepMind Hackathon. Connect your GitHub repository via Supabase Auth, click **⚡ ANALYZE REPO**, and **Gemini 4 Argon** cross-references your manifests and source files against a Supabase CVE datasource to return a visually rich pixel vulnerability report.

---

## ✨ Features & Components

1. **Pixel-Art Brand & Mascot (`public/assets/buzz-logo.svg`, `public/css/pixel.css`)**:
   - Crisp 32×32 pixel-grid SVG logo depicting a golden lightning bolt with two dark expressive eyes floating on a cloud.
   - Retro arcade theme with stepped pixel borders, CRT scanline overlay, security grade badges (`A`–`F`), segmented threat exposure bar, and remediation patch boxes.
2. **HTML + HTMX Frontend (`public/index.html`)**:
   - Zero-framework reactive HTML partials swapped via HTMX (`hx-get` / `hx-post`).
   - Built-in Supabase GitHub OAuth button (`Connect GitHub`) that forwards `X-GitHub-Token` to the Rust serverless functions.
3. **Rust Vercel Serverless Functions (`api/*.rs` + `src/lib.rs`)**:
   - `GET /api/health` (`api/health.rs`): Displays live `GEMINI_API_KEY` and Supabase connection status.
   - `GET /api/auth_config` (`api/auth_config.rs`): Supplies public Supabase URL & anon key to initialize GitHub OAuth.
   - `GET /api/repos` (`api/repos.rs`): Lists the user's GitHub repositories as an HTMX `<select>` picker.
   - `GET /api/cves` (`api/cves.rs`):

Team