argus-security

Unified security scanning — SAST, containers, IaC, secrets, dependencies, and DAST from a single CLI.

Install

pip install argus-security

Quick Start

argus init        # Create argus.yml config
argus scan        # Run all configured scanners

Or scan immediately without a config file:

argus scan bandit gitleaks osv --severity-threshold high

Features

14+ security scanners -- SAST, secrets, containers, IaC, dependencies, DAST, supply chain, malware
Single CLI -- argus scan runs everything, locally or in CI
Flexible selection -- run all scanners, specific ones, or groups
Multiple output formats -- terminal, Markdown, SARIF, JSON
Severity thresholds -- fail builds on low, medium, high, or critical
Docker-backed execution -- scanners run in containers when not installed locally
Config-driven -- argus.yml for repeatable scan profiles
GitHub Actions integration -- composite actions for native CI/CD workflows
Linting built in -- YAML, JSON, Python, JavaScript, Dockerfile, Terraform

Supported Scanners

Category	Scanners
SAST	Bandit, OpenGrep, CodeQL
Secrets	Gitleaks
Containers	Trivy, Grype, Syft
IaC	Trivy IaC, Checkov
Dependencies	OSV Scanner
Supply Chain	zizmor + actionlint
Malware	ClamAV
DAST	ZAP
Compliance	FedRAMP SCN Detector

Configuration

# argus.yml
scanners:
  - gitleaks
  - bandit
  - osv
  - trivy-iac

scan_path: "."
severity_threshold: high

MCP Server (AI Integration)

Argus includes an MCP server so AI assistants (Claude, Copilot, Cursor) can run scans, validate configs, and detect project characteristics directly.

pip install argus-security[mcp]

Add to your AI tool's MCP configuration:

{
  "mcpServers": {
    "argus": {"command": "argus", "args": ["mcp"]}
  }
}

Available tools: argus_scan, argus_detect, argus_validate, argus_list_scanners, argus_init

Documentation

Full docs: huntridge-labs.github.io/argus
GitHub: github.com/huntridge-labs/argus
Configuration reference: docs/config-reference.md
Scanner reference: docs/scanners.md
Examples: examples/
Contributing: CONTRIBUTING.md

License

AGPL-3.0 -- see LICENSE.md for details.

Metadata

Release files for argus-security 1.12.5

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for argus-security 1.12.5
File	Size	Uploaded
argus_security-1.12.5.tar.gz	578.5 kB	Sep 15, 2026	Details

Built distribution (wheel)

Table of built distributions (wheels) for argus-security 1.12.5
File	Interpreter	ABI	Platform	Reset
argus_security-1.12.5-py3-none-any.whl 660.8 kB Sep 15, 2026	Python 3	none	any	Details

Total release size: 1.2 MB

Release files / argus_security-1.12.5.tar.gz

Download URL	argus_security-1.12.5.tar.gz
Size	578.5 kB
Tags	Source
SHA-256 checksum How to use checksums	`2a56f6538c403ee3aa0faeb83e45d31791635898d316c785811e0a37010dbf73`
BLAKE2b-256 checksum How to use checksums	`cbbba90bda6b78f61fd1e1c026d8085fbf4a0e9c5f4c0caf62eed7871bc2745b`
Upload date	Sep 15, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/7.0.0 CPython/3.13.14`

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Identity

Publishing platform: GitHub Actions
Publishing repository: github.com/huntridge-labs/argus
Publishing commit: github.com/huntridge-labs/argus/tree/2cfbc4d67772e5480a92900499655d155c37cb40

Workflow

Publishing configuration: github.com/huntridge-labs/argus/blob/2cfbc4d67772e5480a92900499655d155c37cb40/.github/workflows/release.yml
Publishing logs: github.com/huntridge-labs/argus/actions/runs/34919177519/attempts/1

Artifact

Subject: argus_security-1.12.5.tar.gz
SHA-256 checksum: 2a56f6538c403ee3aa0faeb83e45d31791635898d316c785811e0a37010dbf73 Verifying attestations

Release files / argus_security-1.12.5-py3-none-any.whl

Download URL	argus_security-1.12.5-py3-none-any.whl
Size	660.8 kB
Tags	Python 3
SHA-256 checksum How to use checksums	`54d5a666b6c18c761ea0351815ff8f2d67839214adb6086c83624d917387d9f3`
BLAKE2b-256 checksum How to use checksums	`0751d34f2b340029e84721fef96759a896707e9305140925ae4d31f13cc4ff81`
Upload date	Sep 15, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/7.0.0 CPython/3.13.14`

Provenance

Identity

Publishing platform: GitHub Actions
Publishing repository: github.com/huntridge-labs/argus
Publishing commit: github.com/huntridge-labs/argus/tree/2cfbc4d67772e5480a92900499655d155c37cb40

Workflow

Publishing configuration: github.com/huntridge-labs/argus/blob/2cfbc4d67772e5480a92900499655d155c37cb40/.github/workflows/release.yml
Publishing logs: github.com/huntridge-labs/argus/actions/runs/34919177519/attempts/1

Artifact

Subject: argus_security-1.12.5-py3-none-any.whl
SHA-256 checksum: 54d5a666b6c18c761ea0351815ff8f2d67839214adb6086c83624d917387d9f3 Verifying attestations