argus-security

Unified security scanning — SAST, containers, IaC, secrets, dependencies, and DAST from a single CLI.

Install

pip install argus-security

Quick Start

argus init        # Create argus.yml config
argus scan        # Run all configured scanners

Or scan immediately without a config file:

argus scan bandit gitleaks osv --severity-threshold high

Features

14+ security scanners -- SAST, secrets, containers, IaC, dependencies, DAST, supply chain, malware
Single CLI -- argus scan runs everything, locally or in CI
Flexible selection -- run all scanners, specific ones, or groups
Multiple output formats -- terminal, Markdown, SARIF, JSON
Severity thresholds -- fail builds on low, medium, high, or critical
Docker-backed execution -- scanners run in containers when not installed locally
Config-driven -- argus.yml for repeatable scan profiles
GitHub Actions integration -- composite actions for native CI/CD workflows
Linting built in -- YAML, JSON, Python, JavaScript, Dockerfile, Terraform

Supported Scanners

Category	Scanners
SAST	Bandit, OpenGrep, CodeQL
Secrets	Gitleaks
Containers	Trivy, Grype, Syft
IaC	Trivy IaC, Checkov
Dependencies	OSV Scanner
Supply Chain	zizmor + actionlint
Malware	ClamAV
DAST	ZAP
Compliance	FedRAMP SCN Detector

Configuration

# argus.yml
scanners:
  - gitleaks
  - bandit
  - osv
  - trivy-iac

scan_path: "."
severity_threshold: high

MCP Server (AI Integration)

Argus includes an MCP server so AI assistants (Claude, Copilot, Cursor) can run scans, validate configs, and detect project characteristics directly.

pip install argus-security[mcp]

Add to your AI tool's MCP configuration:

{
  "mcpServers": {
    "argus": {"command": "argus", "args": ["mcp"]}
  }
}

Available tools: argus_scan, argus_detect, argus_validate, argus_list_scanners, argus_init

Documentation

Full docs: huntridge-labs.github.io/argus
GitHub: github.com/huntridge-labs/argus
Configuration reference: docs/config-reference.md
Scanner reference: docs/scanners.md
Examples: examples/
Contributing: CONTRIBUTING.md

License

AGPL-3.0 -- see LICENSE.md for details.

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

argus_security-1.11.0.tar.gz (577.4 kB view details)

Uploaded Jul 28, 2026 Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

The dropdown lists show the available interpreters, ABIs, and platforms. Enable javascript to be able to filter the list of wheel files.

argus_security-1.11.0-py3-none-any.whl (660.5 kB view details)

Uploaded Jul 28, 2026 Python 3

File details

Details for the file argus_security-1.11.0.tar.gz.

File metadata

Download URL: argus_security-1.11.0.tar.gz
Upload date: Jul 28, 2026
Size: 577.4 kB
Tags: Source
Uploaded using Trusted Publishing? Yes
Uploaded via: twine/6.1.0 CPython/3.13.13

File hashes

Hashes for argus_security-1.11.0.tar.gz
Algorithm	Hash digest
SHA256	`2a2cb9fb777232faa73b17e36e2bf88e04f8c2fb015ad017caadce1b204122a8`
MD5	`20ed17b8017e46bf6e6962d189d0f48c`
BLAKE2b-256	`0843fa042a2e5e9efa5eadd169a405a39de44f49d083b23eabe49893454c9967`

See more details on using hashes here.

Provenance

The following attestation bundles were made for argus_security-1.11.0.tar.gz:

Publisher: release.yml on huntridge-labs/argus

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Statement:
- Statement type: https://in-toto.io/Statement/v1
- Predicate type: https://docs.pypi.org/attestations/publish/v1
- Subject name: argus_security-1.11.0.tar.gz
- Subject digest: 2a2cb9fb777232faa73b17e36e2bf88e04f8c2fb015ad017caadce1b204122a8
- Sigstore transparency entry: 2274632220
- Sigstore integration time: Jul 28, 2026
Source repository:
- Permalink: huntridge-labs/argus@4cfebc9301cce7c81cac359caee5d3fa127ff616
- Branch / Tag: refs/heads/main
- Owner: https://github.com/huntridge-labs
- Access: public
Publication detail:
- Token Issuer: https://token.actions.githubusercontent.com
- Runner Environment: github-hosted
- Publication workflow: release.yml@4cfebc9301cce7c81cac359caee5d3fa127ff616
- Trigger Event: workflow_dispatch