ArmorOne SAST 🛡️

ArmorOne is an ultra-fast, multi-engine Static Application Security Testing (SAST), DevSecOps governance, and Agentic AI security platform built for the modern software development lifecycle.

⚡ Quick Installation

Option 1: Modern Isolated Python CLI (uv tool / pipx - Recommended)

# Using uv (fast & isolated):
uv tool install armorone

# Or using pipx:
pipx install armorone

Option 2: Standard pip

pip install armorone

Then provision the two Go engines the CLI shells out to:

armorone setup

🚀 Instant Usage

# Run multi-engine security scan across current repository (Semgrep, Gitleaks, Bandit, Trivy)
armorone scan .

# Sub-10s differential scan (scans only modified lines in git diff)
armorone scan . --diff

# Interactively review and apply auto-remediation patches
armorone fix <finding_fingerprint> --dry-run

# Launch interactive full-screen terminal triage dashboard
armorone triage

# Start FastMCP server for AI coding assistants (Antigravity, Cursor, Claude Code, Gemini)
armorone mcp run

🌟 Core Architecture & Key Features

• Multi-Engine Ingestion: Aggregates Semgrep, Gitleaks, Bandit, and Trivy into a unified, deduplicated ArmorOneFinding schema.
• ⚡ Dual-Mode Remediation:
  • Mode B (Deterministic Polyglot CST): <5ms, $0 token cost, 0% hallucination concrete syntax tree patch generator across Python, TypeScript/JavaScript, Go, Java, and C/C++.
  • Mode A (Code Graph Program Slicing + LLM): Backward taint slicing and context-isolated prompt synthesis for complex architectural refactors.
• 🤖 Native FastMCP Integration: Connects seamlessly to Google Antigravity, Cursor, Claude Code, Gemini CLI, and Windsurf via JSON-RPC stdio.
• 🔒 Sovereign Air-Gapped Mode (Model D): 100% offline rootless container distribution with zero telemetry and zero external network egress.

📚 Documentation & Guides

• 👨‍💻 Developer Quickstart Guide
• ❓ Frequently Asked Questions (FAQ) & Knowledge Base
• 🚀 DevOps & CI/CD Pipeline Guide
• 🔒 Air-Gapped Sovereign Deployment Manual
• 🏗️ Contributor & Core Architecture Guide

📜 License

Apache License 2.0. See LICENSE for details.