argus-security

Unified security scanning — SAST, containers, IaC, secrets, dependencies, and DAST from a single CLI.

Install

pip install argus-security

Quick Start

argus init        # Create argus.yml config
argus scan        # Run all configured scanners

Or scan immediately without a config file:

argus scan bandit gitleaks osv --severity-threshold high

Features

14+ security scanners -- SAST, secrets, containers, IaC, dependencies, DAST, supply chain, malware
Single CLI -- argus scan runs everything, locally or in CI
Flexible selection -- run all scanners, specific ones, or groups
Multiple output formats -- terminal, Markdown, SARIF, JSON
Severity thresholds -- fail builds on low, medium, high, or critical
Docker-backed execution -- scanners run in containers when not installed locally
Config-driven -- argus.yml for repeatable scan profiles
GitHub Actions integration -- composite actions for native CI/CD workflows
Linting built in -- YAML, JSON, Python, JavaScript, Dockerfile, Terraform

Supported Scanners

Category	Scanners
SAST	Bandit, OpenGrep, CodeQL
Secrets	Gitleaks
Containers	Trivy, Grype, Syft
IaC	Trivy IaC, Checkov
Dependencies	OSV Scanner
Supply Chain	zizmor + actionlint
Malware	ClamAV
DAST	ZAP
Compliance	FedRAMP SCN Detector

Configuration

# argus.yml
scanners:
  - gitleaks
  - bandit
  - osv
  - trivy-iac

scan_path: "."
severity_threshold: high

MCP Server (AI Integration)

Argus includes an MCP server so AI assistants (Claude, Copilot, Cursor) can run scans, validate configs, and detect project characteristics directly.

pip install argus-security[mcp]

Add to your AI tool's MCP configuration:

{
  "mcpServers": {
    "argus": {"command": "argus", "args": ["mcp"]}
  }
}

Available tools: argus_scan, argus_detect, argus_validate, argus_list_scanners, argus_init

Documentation

Full docs: huntridge-labs.github.io/argus
GitHub: github.com/huntridge-labs/argus
Configuration reference: docs/config-reference.md
Scanner reference: docs/scanners.md
Examples: examples/
Contributing: CONTRIBUTING.md

License

AGPL-3.0 -- see LICENSE.md for details.

Metadata

Release files for argus-security 1.12.7

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for argus-security 1.12.7
File	Size	Uploaded
argus_security-1.12.7.tar.gz	595.7 kB	Oct 1, 2026	Details

Built distribution (wheel)

Table of built distributions (wheels) for argus-security 1.12.7
File	Interpreter	ABI	Platform	Reset
argus_security-1.12.7-py3-none-any.whl 678.4 kB Oct 1, 2026	Python 3	none	any	Details

Total release size: 1.3 MB

Release files / argus_security-1.12.7.tar.gz

Download URL	argus_security-1.12.7.tar.gz
Size	595.7 kB
Tags	Source
SHA-256 checksum How to use checksums	`b4a339bf68dd5a12c5c4059135425f920fbbab90c01766d481bbc3e5c6909aea`
BLAKE2b-256 checksum How to use checksums	`87daef13f4e8fd18c2bb0f053097fd698ade07dfad2112c35c267b3b8c3ce7e6`
Upload date	Oct 1, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/7.0.0 CPython/3.13.14`

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Identity

Publishing platform: GitHub Actions
Publishing repository: github.com/huntridge-labs/argus
Publishing commit: github.com/huntridge-labs/argus/tree/1779318615646e1793459db394bb022002ad541d

Workflow

Publishing configuration: github.com/huntridge-labs/argus/blob/1779318615646e1793459db394bb022002ad541d/.github/workflows/release.yml
Publishing logs: github.com/huntridge-labs/argus/actions/runs/36938912765/attempts/1

Artifact

Subject: argus_security-1.12.7.tar.gz
SHA-256 checksum: b4a339bf68dd5a12c5c4059135425f920fbbab90c01766d481bbc3e5c6909aea Verifying attestations

Release files / argus_security-1.12.7-py3-none-any.whl

Download URL	argus_security-1.12.7-py3-none-any.whl
Size	678.4 kB
Tags	Python 3
SHA-256 checksum How to use checksums	`e1b8b018f57bc87fd80cad7720c7548dc0120a19737b90c3ab2c9d01f7001f5c`
BLAKE2b-256 checksum How to use checksums	`7464394fdde857954b0f9118480e186c56bcb15222e5062ac3261abfac5b8c81`
Upload date	Oct 1, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/7.0.0 CPython/3.13.14`

Provenance

Identity

Publishing platform: GitHub Actions
Publishing repository: github.com/huntridge-labs/argus
Publishing commit: github.com/huntridge-labs/argus/tree/1779318615646e1793459db394bb022002ad541d

Workflow

Publishing configuration: github.com/huntridge-labs/argus/blob/1779318615646e1793459db394bb022002ad541d/.github/workflows/release.yml
Publishing logs: github.com/huntridge-labs/argus/actions/runs/36938912765/attempts/1

Artifact

Subject: argus_security-1.12.7-py3-none-any.whl
SHA-256 checksum: e1b8b018f57bc87fd80cad7720c7548dc0120a19737b90c3ab2c9d01f7001f5c Verifying attestations