Abstract: Disclosed herein is a method and system using either dedicated appliances or virtual hosts to perform scanning on software repositories to identify malware and security risks in the software coding design prior to production implementations. The system can be utilized to provide a preemptive measure to ensure best practices are employed. The system can also scan for common errors such as hardcoded passwords to ensure they are not introduced in the implementation of the software. The system can also be used to automatically provide a layer defense in a Software Development Lifecycle for detection during testing and quality assurance phases.