Pre-commit security scanner for local Git workflows.

Install a local Git hook that runs Radar before risky code reaches a commit, with configurable thresholds for SAST, secrets, dependencies, and code health.

Run this check locally Inspect sample finding

radar scan . --quick

Scan code before commit

Use Radar as a pre-commit SAST and git hook security scanner when a repository needs a local guardrail before CI.

Pre-commit security scanner
Git hook security scanner
Fail-on thresholds
No source upload

Git hooks

Evidence to inspect

Use “Pre-commit security scanner for local Git workflows.” as the scope for this decision: verify the input, finding detail, workflow handoff, and product boundary before you install or buy.

CriterionEvidence to inspectBoundary

Input scopeSelected files, configuration, scan mode, and enabled rules.Only included paths and configured checks are evaluated.

Finding detailFile, line, rule ID, severity, explanation, and repair direction.Illustrative output is not a result from your repository.

Workflow handoffLocal result, report format, agent context, and optional CI signal.Enable exports or CI only when the workflow needs them.

Decision fitUse the same criteria on a real repository before choosing a plan or tool.No universal winner or guaranteed outcome is claimed.

Git hooks

Run this check locally

Managed hook commands

Radar installs, checks, and removes its hook without overwriting existing non-Radar hooks unless forced.

radar hook install
radar hook status
radar hook uninstall

Official source

Primary sources

NISTSecure Software Development Framework (SSDF) 1.1
GitHub DocsUploading a SARIF file to GitHub

Validate the workflow on your own code.

Apply this page’s evidence to one real repository. For “Pre-commit security scanner for local Git workflows.”, confirm which finding is produced, whether the proposed next step is reproducible, and where local scanning, reports, agents, or CI should stop or expand.