Karnak: a stdlib-only code scanner that reports what it skipped

The author built Karnak, an alpha code scanner that looks for hardcoded credentials, dangerous code patterns, and dependencies with known vulnerabilities. It runs on the Python standard library alone, so it can be used on locked-down machines, and outputs results to the terminal, JSON, or SARIF for GitHub code scanning. Python files are parsed with an AST-based engine, while other languages use regex rules that are labeled heuristic and capped at medium confidence. Secrets are never printed in full, and every skipped file or check is recorded with a reason, with a nonzero exit code signaling when the tool itself failed. Baselines let teams fail builds only on newly introduced findings.