bootsec 0.8.0

Security baseline for your project. One command, you're set.

Bootsec

Security baseline for your project. One command, you're set.

Fast — under 60 seconds. No network calls.

Quick Start

pip install bootsec
bootsec go

That's it. You now have:

• .gitignore that blocks secrets
• SECURITY.md for vulnerability reports
• docs/security-checklist.md pre-launch checklist
• .pre-commit-config.yaml commit guard

Commands

Command	Description
bootsec go	Full setup: docs + commit guard
bootsec guard	Block commits with issues (pre-commit, <1s)
bootsec peek	Preview what go would create
bootsec review	Preview coverage layers
bootsec packs	List all available packs

Flags

Flag	Description
--full	Allow extra packs beyond auto-selection
--ci	Include GitHub Actions security workflow

Examples

# Basic setup
bootsec go

# Setup with GitHub Actions
bootsec go --ci

# Preview changes without writing
bootsec peek

How It Works

1. Auto-detect — Scans your repo and picks relevant packs (Node, Python, Flutter, etc.)
2. Generate — Creates baseline docs tailored to your stack
3. Guard — Installs pre-commit hooks that block obvious mistakes
4. Merge-first — Never overwrites your existing config

What Gets Generated

File	Purpose
.gitignore	Blocks secrets, build artifacts
.env.example	Environment template
SECURITY.md	Vulnerability reporting
docs/security-checklist.md	Pre-launch checklist
.pre-commit-config.yaml	Commit guard

Packs

Auto-selected based on your stack:

• Core — Always on (MFA, secrets, logging, backups)
• Baseline — Regional defaults
• Platform — API, web, mobile, CLI, SaaS
• Data — Payments, health, PII

Design

• Merge, don't overwrite
• No network calls
• No framework names in generated docs
• Pure Python, zero dependencies

---

🚀 Want More?

Bootsec Pro unlocks:

Feature	Description
bootsec check	Deep security audit with score (0-100)
bootsec scan	Vulnerability detection via OSV
bootsec deps	Dependency audit (npm/pip/cargo/go/ruby/php)
bootsec sbom	Software Bill of Materials
bootsec ai	AI-powered fix suggestions

85+ secret patterns • Docker/K8s checks • Supply chain security

→ Get Pro — $3.99/year

---

Requirements

• Python 3.10+
• Git (for guard)

License

MIT