Skip to content

Code Context Engine (CCE)

Know what your code can access — cross-language static analysis that maps SDK call sites to structured entitlements for IAM right-sizing, modernization, and CI governance.

CCE parses Go, Python, Java, and JavaScript with tree-sitter, maps methods to Provider / Resource / Operation, and produces JSON reports. It is read-only (inventory only); pair with OpenRewrite or your own codemods to apply changes.

Install

brew tap stackgenhq/homebrew-stackgen
brew install stackgenhq/homebrew-stackgen/cce
cce -version

Or use the container image ghcr.io/stackgenhq/cce:latest.

Quick scan

cd ./my-service
cce plan -folder . -language AUTO
cce -folder . -language AUTO -filter cloud -format json -output cloud-entitlements.json

Next steps