Just released v0.2.1 of an open-source tool i built. it runs the same security and privacy checks whichever AI wrote the code: secrets, Aadhaar, PAN, mobile numbers and emails get blocked at commit and in CI, and reports mask the value.
It ties findings to NIST SSDF, ISO 27001 and the DPDP Act. It isn't a compliance certification, but it does show your control gaps.
If it's useful, please star the repo. it helps others find it.