devseclint 0.1.0

Scan development configs for security misconfigurations

DevSecLint 🛡️

A secure config scanner for developers. Scans .env, Dockerfile, Kubernetes, and more for misconfigurations — with optional AI-powered fixes (Gemini).

Features

• 🔍 Detect secrets in .env
• 🐳 Scan Dockerfiles for bad practices
• ☸️ Validate Kubernetes YAML for securityContext
• 🤖 AI remediation suggestions (Google Gemini)
• ✅ CLI + Python API + GitHub Action ready

---

🔧 Install

pip install devseclint

Or locally:

pip install -e .

🚀 CLI Usage

devseclint scan .

Optional flags:

--ai-fix → show AI suggestions

--fix → auto-rewrite files (uses Gemini)

--ci → CI-friendly JSON output

🧠 AI Fixes (Gemini)

Set your API key:

export GEMINI_API_KEY=your-key-here

or

• change the template.env to .env and add GEMINI_API_KEY

Then run:

devseclint scan . --ai-fix
devseclint scan . --fix

📦 Python API

from devseclint.scanner import scan_directory

results = scan_directory("/path/to/code")
for issue in results:
    print(issue)

✅ GitHub Action

- name: Run DevSecLint
  run: python cli.py scan . --ci

• SAMPLE TEMPLATE IN template.github, change to .github

📄 License

MIT © Rohan Shaw