argus-security

Unified security scanning — SAST, containers, IaC, secrets, dependencies, and DAST from a single CLI.

Install

pip install argus-security

Quick Start

argus init        # Create argus.yml config
argus scan        # Run all configured scanners

Or scan immediately without a config file:

argus scan bandit gitleaks osv --severity-threshold high

Features

14+ security scanners -- SAST, secrets, containers, IaC, dependencies, DAST, supply chain, malware
Single CLI -- argus scan runs everything, locally or in CI
Flexible selection -- run all scanners, specific ones, or groups
Multiple output formats -- terminal, Markdown, SARIF, JSON
Severity thresholds -- fail builds on low, medium, high, or critical
Docker-backed execution -- scanners run in containers when not installed locally
Config-driven -- argus.yml for repeatable scan profiles
GitHub Actions integration -- composite actions for native CI/CD workflows
Linting built in -- YAML, JSON, Python, JavaScript, Dockerfile, Terraform

Supported Scanners

Category	Scanners
SAST	Bandit, OpenGrep, CodeQL
Secrets	Gitleaks
Containers	Trivy, Grype, Syft
IaC	Trivy IaC, Checkov
Dependencies	OSV Scanner
Supply Chain	zizmor + actionlint
Malware	ClamAV
DAST	ZAP
Compliance	FedRAMP SCN Detector

Configuration

# argus.yml
scanners:
  - gitleaks
  - bandit
  - osv
  - trivy-iac

scan_path: "."
severity_threshold: high

MCP Server (AI Integration)

Argus includes an MCP server so AI assistants (Claude, Copilot, Cursor) can run scans, validate configs, and detect project characteristics directly.

pip install argus-security[mcp]

Add to your AI tool's MCP configuration:

{
  "mcpServers": {
    "argus": {"command": "argus", "args": ["mcp"]}
  }
}

Available tools: argus_scan, argus_detect, argus_validate, argus_list_scanners, argus_init

Documentation

Full docs: huntridge-labs.github.io/argus
GitHub: github.com/huntridge-labs/argus
Configuration reference: docs/config-reference.md
Scanner reference: docs/scanners.md
Examples: examples/
Contributing: CONTRIBUTING.md

License

AGPL-3.0 -- see LICENSE.md for details.

Metadata

Release files for argus-security 1.12.3

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for argus-security 1.12.3
File	Size	Uploaded
argus_security-1.12.3.tar.gz	578.5 kB	Aug 26, 2026	Details

Built distribution (wheel)

Table of built distributions (wheels) for argus-security 1.12.3
File	Interpreter	ABI	Platform	Reset
argus_security-1.12.3-py3-none-any.whl 660.8 kB Aug 26, 2026	Python 3	none	any	Details

Total release size: 1.2 MB

Release files / argus_security-1.12.3.tar.gz

Download URL	argus_security-1.12.3.tar.gz
Size	578.5 kB
Tags	Source
SHA-256 checksum How to use checksums	`c6ebf205648411371dc21ab6e22e67db72abf97e48d65e6813b4da7122760a9c`
BLAKE2b-256 checksum How to use checksums	`53ad88c2e7d0a84777df670a26c88da255dd4a13fb4347ff4eb7f2731e89c84f`
Upload date	Aug 26, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/6.1.0 CPython/3.13.14`

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Identity

Publishing platform: GitHub Actions
Publishing repository: github.com/huntridge-labs/argus
Publishing commit: github.com/huntridge-labs/argus/tree/20d7f1e81e7051b11c21de56020ec39e6bee7a85

Workflow

Publishing configuration: github.com/huntridge-labs/argus/blob/20d7f1e81e7051b11c21de56020ec39e6bee7a85/.github/workflows/release.yml
Publishing logs: github.com/huntridge-labs/argus/actions/runs/32962733883/attempts/1

Artifact

Subject: argus_security-1.12.3.tar.gz
SHA-256 checksum: c6ebf205648411371dc21ab6e22e67db72abf97e48d65e6813b4da7122760a9c Verifying attestations

Release files / argus_security-1.12.3-py3-none-any.whl

Download URL	argus_security-1.12.3-py3-none-any.whl
Size	660.8 kB
Tags	Python 3
SHA-256 checksum How to use checksums	`9b9e4684eff61d70bf6df3571079788c400f7a032e934c119e353b5905132872`
BLAKE2b-256 checksum How to use checksums	`c89b273d5779c14072eb621607c85c003004c317977ac7330421dda60fa1445d`
Upload date	Aug 26, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/6.1.0 CPython/3.13.14`

Provenance

Identity

Publishing platform: GitHub Actions
Publishing repository: github.com/huntridge-labs/argus
Publishing commit: github.com/huntridge-labs/argus/tree/20d7f1e81e7051b11c21de56020ec39e6bee7a85

Workflow

Publishing configuration: github.com/huntridge-labs/argus/blob/20d7f1e81e7051b11c21de56020ec39e6bee7a85/.github/workflows/release.yml
Publishing logs: github.com/huntridge-labs/argus/actions/runs/32962733883/attempts/1

Artifact

Subject: argus_security-1.12.3-py3-none-any.whl
SHA-256 checksum: 9b9e4684eff61d70bf6df3571079788c400f7a032e934c119e353b5905132872 Verifying attestations