Project Aegis CLI 2.0
A simple CLI tool to automate the creation of essential security starter files for your projects. Now with expanded language support and automated checks!
The Problem
Every project needs a SECURITY.md file, dependabot.yml config, and basic security guidelines. But it’s a boring, repetitive chore that’s easy to neglect, leaving most projects without them until it's too late.
The Solution
aegis is a command-line tool that handles the grunt work. It scans your project, detects the primary language, and generates essential security starter files from best-practice templates. It turns a 15-minute chore into a 3-second command.
Disclaimer: This is a Starting Point
Let's be clear: this tool is a starting point, not a magic bullet. It generates boilerplate documentation and is NOT a vulnerability scanner, security audit tool, or a replacement for a comprehensive security strategy. You are still responsible for writing secure code and using dedicated security tools.
What's New in 2.0
Version 2.0 expands on the solid foundation of the original release with key features designed to broaden its utility and deepen its integration into your workflow.
-
Expanded Language Support: Aegis now supports Java and Rust alongside Python and JavaScript, making it useful for a wider range of projects.
-
Git Hooks Integration: Automatically ensure your security documentation is in place before you even commit. A new
aegis install-hookcommand sets up a pre-commit Git hook that verifies your security files are present.
Features
-
Multi-Language Detection: Scans your project to identify the language (now supports Python, JavaScript, Java, and Rust).
-
Essential File Generation: Creates the following from proven templates: -
.github/dependabot.yml: A ready-to-use config to keep dependencies updated via GitHub. -security/SECURITY.md: A solid, customizable policy for vulnerability reporting. -security/SecureCodingGuide.md: A language-specific checklist for secure coding practices. -
Automated Compliance: Optional pre-commit hook to prevent commits if security files are missing.
-
Safe & Customizable: Use
--dry-runto preview changes without writing files and--outputto specify a custom directory.
Installation
Install directly from PyPI:
pip install aegis-cli
Or, to contribute, clone the repository and install in editable mode:
git clone [https://github.com/JamesTheGiblet/Project-Aegis-CLI.git](https://github.com/JamesTheGiblet/Project-Aegis-CLI.git)
cd Project-Aegis-CLI
pip install -e .[test]
Metadata
Release files for aegis-cli 2.0.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| aegis_cli-2.0.0.tar.gz | 14.7 kB | Without provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| aegis_cli-2.0.0-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 30.7 kB
Release files / aegis_cli-2.0.0.tar.gz
| Download URL | aegis_cli-2.0.0.tar.gz |
|---|---|
| Size | 14.7 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
e7424e66ccfa56be55c98dac2b19d4b6477f63ce32744466d945744b71b4a53f
|
|
BLAKE2b-256 checksum How to use checksums |
d45992567754c6e3fcc0e5f1455104f87553cff044b6486d5d2d76c913f9ca4f
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.13.3
|
Release files / aegis_cli-2.0.0-py3-none-any.whl
| Download URL | aegis_cli-2.0.0-py3-none-any.whl |
|---|---|
| Size | 16.0 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
a551a55e231a7b819bed77eb0eba6c75fe128ba1191ec99b38593f13c56ae429
|
|
BLAKE2b-256 checksum How to use checksums |
48e80242fc8752f65e313c5b01d0afcbe0cfa90e8f883106bb6983f8abbd253f
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.13.3
|
Security for aegis-cli 2.0.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.