Bootsec
Security baseline for your project. One command, you're set.
The Problem
You're shipping fast. Security? "We'll add it later."
Later never comes. Then some bot finds your AWS keys on GitHub at 3am.
The Fix
pip install bootsec
bootsec go
That's it. 60 seconds. Done.
You now have:
.gitignorethat actually blocks secretsSECURITY.mdso people can report vulnsdocs/security-checklist.mdfor pre-launch.pre-commit-config.yamlthat catches mistakes before you commit
No config files. No 200-page docs. No BS.
Commands
| Command | What it does |
|---|---|
bootsec go |
Setup everything |
bootsec guard |
Pre-commit check (<1 sec) |
bootsec peek |
Preview before applying |
bootsec packs |
See available packs |
How It Works
- Scans your repo (Node? Python? Flutter? We got you)
- Generates security docs for your stack
- Guards your commits so you don't push secrets
- Merges with your existing files (never overwrites)
What You Get
| File | Why |
|---|---|
.gitignore |
Blocks secrets, build junk |
.env.example |
Template for env vars |
SECURITY.md |
Vuln reporting |
docs/security-checklist.md |
Pre-launch checklist |
.pre-commit-config.yaml |
Commit guard |
Examples
bootsec go # basic setup
bootsec go --ci # + GitHub Actions
bootsec peek # just preview, no changes
Design
- Merge, don't overwrite
- No network calls
- Pure Python, zero deps
- Fast. Like, actually fast.
Want More?
Bootsec Pro unlocks the good stuff:
| Command | What it does |
|---|---|
bootsec check |
Security audit with score (0-100) |
bootsec scan |
Find vulnerable deps |
bootsec deps |
Audit npm/pip/cargo/go/ruby/php |
bootsec sbom |
Generate SBOM |
bootsec ai |
AI fix suggestions |
Plus: 85+ secret patterns, Docker/K8s checks, supply chain security.
Requirements
- Python 3.10+
- Git
License
MIT
Code audited by my buddy Claude. He finds bugs at 3am without complaining. Truly built different.
1 maintainer
Metadata
1 maintainer
Release files for bootsec 0.9.2
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| bootsec-0.9.2.tar.gz | 31.8 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| bootsec-0.9.2-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 84.8 kB
Release files / bootsec-0.9.2.tar.gz
| Download URL | bootsec-0.9.2.tar.gz |
|---|---|
| Size | 31.8 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
7830805a7541abeb29f433becc0de5173ed0f93d385332aca6b0b0c9837ea58f
|
|
BLAKE2b-256 checksum How to use checksums |
12e27d4f44ca0876b8292c0dff65d6e3b84b8c2be184163cd6dc4668319b6f82
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.9.6
|
Release files / bootsec-0.9.2-py3-none-any.whl
| Download URL | bootsec-0.9.2-py3-none-any.whl |
|---|---|
| Size | 53.0 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
177576dec3c7c04fa519350d967cfcbd49c010f17f4e571dce8d330f9cf8af5f
|
|
BLAKE2b-256 checksum How to use checksums |
f9c0550391da050c349ef0a70f67c158c83893ef64e69547d625586f6a58804f
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.9.6
|
