argus-security

Unified security scanning — SAST, containers, IaC, secrets, dependencies, and DAST from a single CLI.

Install

pip install argus-security

Quick Start

argus init        # Create argus.yml config
argus scan        # Run all configured scanners

Or scan immediately without a config file:

argus scan bandit gitleaks osv --severity-threshold high

Features

14+ security scanners -- SAST, secrets, containers, IaC, dependencies, DAST, supply chain, malware
Single CLI -- argus scan runs everything, locally or in CI
Flexible selection -- run all scanners, specific ones, or groups
Multiple output formats -- terminal, Markdown, SARIF, JSON
Severity thresholds -- fail builds on low, medium, high, or critical
Docker-backed execution -- scanners run in containers when not installed locally
Config-driven -- argus.yml for repeatable scan profiles
GitHub Actions integration -- composite actions for native CI/CD workflows
Linting built in -- YAML, JSON, Python, JavaScript, Dockerfile, Terraform

Supported Scanners

Category	Scanners
SAST	Bandit, OpenGrep, CodeQL
Secrets	Gitleaks
Containers	Trivy, Grype, Syft
IaC	Trivy IaC, Checkov
Dependencies	OSV Scanner
Supply Chain	zizmor + actionlint
Malware	ClamAV
DAST	ZAP
Compliance	FedRAMP SCN Detector

Configuration

# argus.yml
scanners:
  - gitleaks
  - bandit
  - osv
  - trivy-iac

scan_path: "."
severity_threshold: high

MCP Server (AI Integration)

Argus includes an MCP server so AI assistants (Claude, Copilot, Cursor) can run scans, validate configs, and detect project characteristics directly.

pip install argus-security[mcp]

Add to your AI tool's MCP configuration:

{
  "mcpServers": {
    "argus": {"command": "argus", "args": ["mcp"]}
  }
}

Available tools: argus_scan, argus_detect, argus_validate, argus_list_scanners, argus_init

Documentation

Full docs: huntridge-labs.github.io/argus
GitHub: github.com/huntridge-labs/argus
Configuration reference: docs/config-reference.md
Scanner reference: docs/scanners.md
Examples: examples/
Contributing: CONTRIBUTING.md

License

AGPL-3.0 -- see LICENSE.md for details.

Metadata

Release files for argus-security 1.12.6

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for argus-security 1.12.6
File	Size	Uploaded
argus_security-1.12.6.tar.gz	594.8 kB	Sep 22, 2026	Details

Built distribution (wheel)

Table of built distributions (wheels) for argus-security 1.12.6
File	Interpreter	ABI	Platform	Reset
argus_security-1.12.6-py3-none-any.whl 677.6 kB Sep 22, 2026	Python 3	none	any	Details

Total release size: 1.3 MB

Release files / argus_security-1.12.6.tar.gz

Download URL	argus_security-1.12.6.tar.gz
Size	594.8 kB
Tags	Source
SHA-256 checksum How to use checksums	`d62ab1a764218f093894fbc2490a50388ef33aa2e9c144d23b6cded10ebd39f8`
BLAKE2b-256 checksum How to use checksums	`3d5a69d9c8222126a290e6a75536b24b53647ee75d11ee7c508256e7880fe512`
Upload date	Sep 22, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/7.0.0 CPython/3.13.14`

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Identity

Publishing platform: GitHub Actions
Publishing repository: github.com/huntridge-labs/argus
Publishing commit: github.com/huntridge-labs/argus/tree/11c55cfb25cc6490da52220fa7aabb9f9f905dc5

Workflow

Publishing configuration: github.com/huntridge-labs/argus/blob/11c55cfb25cc6490da52220fa7aabb9f9f905dc5/.github/workflows/release.yml
Publishing logs: github.com/huntridge-labs/argus/actions/runs/35718835822/attempts/1

Artifact

Subject: argus_security-1.12.6.tar.gz
SHA-256 checksum: d62ab1a764218f093894fbc2490a50388ef33aa2e9c144d23b6cded10ebd39f8 Verifying attestations

Release files / argus_security-1.12.6-py3-none-any.whl

Download URL	argus_security-1.12.6-py3-none-any.whl
Size	677.6 kB
Tags	Python 3
SHA-256 checksum How to use checksums	`cc96d893d36ba4bf2480636f953936f9b3fd96fe9627a2926b3fd44d411167cd`
BLAKE2b-256 checksum How to use checksums	`3469a3c54bbb21cd60b3e13e62e6c4341f44e59c1e72a0741d37549cac14fba3`
Upload date	Sep 22, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/7.0.0 CPython/3.13.14`

Provenance

Identity

Publishing platform: GitHub Actions
Publishing repository: github.com/huntridge-labs/argus
Publishing commit: github.com/huntridge-labs/argus/tree/11c55cfb25cc6490da52220fa7aabb9f9f905dc5

Workflow

Publishing configuration: github.com/huntridge-labs/argus/blob/11c55cfb25cc6490da52220fa7aabb9f9f905dc5/.github/workflows/release.yml
Publishing logs: github.com/huntridge-labs/argus/actions/runs/35718835822/attempts/1

Artifact

Subject: argus_security-1.12.6-py3-none-any.whl
SHA-256 checksum: cc96d893d36ba4bf2480636f953936f9b3fd96fe9627a2926b3fd44d411167cd Verifying attestations