Skip to main content

Project Aegis CLI 2.0

A simple CLI tool to automate the creation of essential security starter files for your projects. Now with expanded language support and automated checks!

The Problem

Every project needs a SECURITY.md file, dependabot.yml config, and basic security guidelines. But it’s a boring, repetitive chore that’s easy to neglect, leaving most projects without them until it's too late.

The Solution

aegis is a command-line tool that handles the grunt work. It scans your project, detects the primary language, and generates essential security starter files from best-practice templates. It turns a 15-minute chore into a 3-second command.

Disclaimer: This is a Starting Point

Let's be clear: this tool is a starting point, not a magic bullet. It generates boilerplate documentation and is NOT a vulnerability scanner, security audit tool, or a replacement for a comprehensive security strategy. You are still responsible for writing secure code and using dedicated security tools.

What's New in 2.0

Version 2.0 expands on the solid foundation of the original release with key features designed to broaden its utility and deepen its integration into your workflow.

  • Expanded Language Support: Aegis now supports Java and Rust alongside Python and JavaScript, making it useful for a wider range of projects.

  • Git Hooks Integration: Automatically ensure your security documentation is in place before you even commit. A new aegis install-hook command sets up a pre-commit Git hook that verifies your security files are present.

Features

  • Multi-Language Detection: Scans your project to identify the language (now supports Python, JavaScript, Java, and Rust).

  • Essential File Generation: Creates the following from proven templates: - .github/dependabot.yml: A ready-to-use config to keep dependencies updated via GitHub. - security/SECURITY.md: A solid, customizable policy for vulnerability reporting. - security/SecureCodingGuide.md: A language-specific checklist for secure coding practices.

  • Automated Compliance: Optional pre-commit hook to prevent commits if security files are missing.

  • Safe & Customizable: Use --dry-run to preview changes without writing files and --output to specify a custom directory.

Installation

Install directly from PyPI:

pip install aegis-cli

Or, to contribute, clone the repository and install in editable mode:

git clone [https://github.com/JamesTheGiblet/Project-Aegis-CLI.git](https://github.com/JamesTheGiblet/Project-Aegis-CLI.git)
cd Project-Aegis-CLI
pip install -e .[test]

Metadata

Release files for aegis-cli 2.0.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for aegis-cli 2.0.0
File Size Uploaded Provenance
aegis_cli-2.0.0.tar.gz 14.7 kB Without provenance Details

Built distribution (wheel)

Table of built distributions (wheels) for aegis-cli 2.0.0
File Interpreter ABI Platform
aegis_cli-2.0.0-py3-none-any.whl Python 3 none any Details

Total release size: 30.7 kB

Release files / aegis_cli-2.0.0.tar.gz

Download URL aegis_cli-2.0.0.tar.gz
Size 14.7 kB
Tags Source
SHA-256 checksum
How to use checksums
e7424e66ccfa56be55c98dac2b19d4b6477f63ce32744466d945744b71b4a53f
BLAKE2b-256 checksum
How to use checksums
d45992567754c6e3fcc0e5f1455104f87553cff044b6486d5d2d76c913f9ca4f
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/6.2.0 CPython/3.13.3

Release files / aegis_cli-2.0.0-py3-none-any.whl

Download URL aegis_cli-2.0.0-py3-none-any.whl
Size 16.0 kB
Tags Python 3
SHA-256 checksum
How to use checksums
a551a55e231a7b819bed77eb0eba6c75fe128ba1191ec99b38593f13c56ae429
BLAKE2b-256 checksum
How to use checksums
48e80242fc8752f65e313c5b01d0afcbe0cfa90e8f883106bb6983f8abbd253f
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/6.2.0 CPython/3.13.3

Security for aegis-cli 2.0.0

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

Release history Release notifications | RSS feed

This release

2.0.0 This release

2 release files No provenance

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page