argus-redteam-agent 0.3.0

Argus RedTeam local security scan agent — code never leaves your infrastructure

argus-agent

Argus RedTeam local security scan agent. Runs SAST (semgrep) and SCA (Trivy) entirely inside your infrastructure — no source code leaves your network.

Installation

pip install argus-redteam-agent

Requires: Python 3.10+, semgrep, trivy (for dependency scan)

Quick Start

Online mode (uploads results to Argus dashboard)

argus-agent scan /path/to/repo \
  --target-name "my-service" \
  --api-key "$ARGUS_API_KEY" \
  --server "https://argus-origin.block-s.io"

AI deep analysis — server mode (snippet-based, code stays local)

argus-agent scan /path/to/repo \
  --target-name "my-service" \
  --api-key "$ARGUS_API_KEY" \
  --server "https://argus-origin.block-s.io" \
  --ai-mode server --sensitivity full

AI deep analysis — local mode (Claude API called directly, code never sent to Argus)

ANTHROPIC_API_KEY=sk-ant-... \
argus-agent scan /path/to/repo \
  --target-name "my-service" \
  --api-key "$ARGUS_API_KEY" \
  --server "https://argus-origin.block-s.io" \
  --ai-mode local

Air-gap mode (results stay local)

# Scan and save to file
argus-agent airgap /path/to/repo \
  --target-name "my-service" \
  --passphrase "strong-passphrase"

# Decrypt and import via dashboard
argus-agent decrypt argus-my-service-20260101.enc --passphrase "strong-passphrase"

Docker

docker run --rm \
  -v /path/to/repo:/scan-target \
  -e ARGUS_API_KEY=your-key \
  blocks/argus-agent:latest \
  --target-name my-service --server https://argus-origin.block-s.io

Options

argus-agent scan --help
argus-agent airgap --help

Sensitivity levels

Level	What is sent
full	Code snippets included
medium	SHA-256 hash only (default)
minimal	Finding count only

AI modes

Mode	Where AI runs	Code destination
off	No AI analysis	—
server	Argus server (snippets only)	Snippets → Argus server
local	Local machine (Claude API)	Code → Anthropic API

License

Proprietary — see argus-redteam.io for licensing.