Arvos Utility Tool
AI and Risk-based Vulnerability Management for Trustworthy Open Source Adoption
Requirements
Python >= 3.9 and pip installed
Docker installed
Debugfs mounted ( sudo mount -t debugfs debugfs /sys/kernel/debug )
- Linux kernel headers ( If not installed already )
Ubuntu/Debian : apt-get install -y linux-headers-$(uname -r)
CentOs : yum install -y kernel-devel
Fedora : dnf install -y kernel-devel
How to install
$ pip install arvos $ arvos --help
Usage
Demo usage :
$ arvos --demo
The following command will build a Java application image ( based on jdk 17 ) from the specified jar, run it, and start the tracer app for a period of 2 minutes.
$ arvos scan --java 17 --jar target/application.jar --trace-period 2 --save-report pdf --pom pom.xml
A .pdf report will be saved under your $HOME/arvos-reports folder.
Output
Supported platforms
Linux only.
1 maintainer
Metadata
1 maintainer
Release files for arvos 3.0.12
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| arvos-3.0.12-py2.py3-none-any.whl | Python 3, Python 2 | none | any | Details |
Release files / arvos-3.0.12-py2.py3-none-any.whl
| Download URL | arvos-3.0.12-py2.py3-none-any.whl |
|---|---|
| Size | 6.6 kB |
| Tags | Python 2 Python 3 |
|
SHA-256 checksum How to use checksums |
1350fb589e62c6f508908438bc96a2a6a166ffa3829273f1da0f5e033a32eb1a
|
|
BLAKE2b-256 checksum How to use checksums |
d8c2cbf65a71bad7f838b1bbe5a27d7aa66352606884432b5ce5abc817cd0c30
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/4.0.0 CPython/3.9.11
|
Security for arvos 3.0.12
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
