gauravkarakoti/secureflow ? reverse-engineered prompt

Build me a web app called SecureFlow that connects to GitHub as a GitHub App and scans pull requests whenever they’re opened or updated.

I want it to look at the changed code, detect hardcoded secrets, security issues, bad configs, and other risky code, then give clear explanations and simple fix suggestions. It should post the results back on the pull request as comments, and also set a clear status like pass, review required, or blocked.

Please include a dashboard where I can see my repositories, pull requests, findings, and audit logs in one place. I also want a way to create and turn on or off custom security policies, plus dismiss findings with a reason so they stay suppressed in later scans. Make sure secret values are masked everywhere and never shown raw.

Use the current docs and best practices if you need to look anything up online.