VulnIQ can process any git repository and discover vulnerabilities, fixes for vulnerabilities and correlate commits, code changes, with other data.
VulnIQ can also discover vulnerabilities without CVEs by analyzing source code changes.
When running your private instance, you can configure monitored git repositories as you like. You can even add your internal source code repositories.