foxguard

foxguard

Fast local security scanning for code, secrets, dependencies, and crypto risk.
Integrated into 0sec, the open cybersecurity harness.

CI foxguard: clean crates.io npm Install GitHub App 

npx foxguard .

foxguard scan demo

Why

  •   200+ built-in rules across 12 source languages, plus config and manifest checks
  •   Taint tracking for 14 languages, with cross-file analysis for Python, JavaScript, Go, Java, Ruby, PHP, C#, and Kotlin
  •   Fast local and CI scans, with diff mode for “what did this branch add?”
  •   Secrets scanning, OSV-backed dependency scanning, and post-quantum crypto audit
  •   Semgrep/OpenGrep-compatible YAML bridge that loads ~98% of the public registry (coverage report)
  •   Terminal, JSON, SARIF, CycloneDX 1.6 CBOM, and Semgrep-compatible JSON output

Install

npx foxguard .                                      # zero install
curl -fsSL https://foxguard.dev/install.sh | sh     # prebuilt binary (macOS/Linux)
cargo install foxguard                              # from source

Prebuilt installs verify release binaries against checksums.txt. Release binaries also publish GitHub artifact attestations; use gh attestation verify for manual verification, or see release provenance.

GitHub Action:

- uses: 0sec-labs/foxguard/action@v0.13.1
  with:
    path: .
    severity: medium
    fail-on-findings: "true"
    upload-sarif: "true"

pre-commit:

repos:
  - repo: https://github.com/0sec-labs/foxguard
    rev: v0.13.1
    hooks:
      - id: foxguard

Integrations: GitHub App, VS Code, Claude Code plugin, and MCP server.

Hosted GitHub App operations

foxguard-github-app writes newline-delimited JSON logs. Completed and failed scans use event=foxguard.scan.completed and event=foxguard.scan.failed, with delivery, installation, repository, PR, commit, duration, and usage_scope fields for correlation. Keep identifiers as log fields, not metric labels.

Set FOXGUARD_INTERNAL_ACCOUNTS to a comma-separated list of your own GitHub accounts and organizations. Matching is case-insensitive. Other owners are classified as external; an unset list or missing owner produces unknown. External activity is not proof of a paying customer, and scans are not people.

The installation registry is reconciled against all pages of GitHub's App installation API at startup and hourly. Failed refreshes retain existing state; concurrent webhooks take precedence. Sparse webhook metadata preserves known account details and observed repository names. Those names are not a complete inventory of an installation's accessible repositories.

Persist FOXGUARD_INSTALLATIONS_PATH and FOXGUARD_PULL_REQUEST_JOBS_PATH on durable storage. Monitor foxguard.installations.reconcile_failed alongside scan failures; foxguard.installations.reconciled reports the total and internal/external/unknown installation counts after a successful refresh. Size FOXGUARD_PR_WORKERS against measured scanner peak memory and the container memory limit: child-process OOM kills can occur without restarting the hosted application.

Quick Start

foxguard .                              # scan everything
foxguard diff main .                    # only new findings vs main
foxguard secrets .                      # leaked credentials and keys
foxguard sca .                          # dependency vulnerabilities from OSV
foxguard pqc .                          # post-quantum crypto audit
foxguard --format sarif . > results.sarif
foxguard --format semgrep-json .        # Semgrep CLI-compatible JSON

Use foxguard --fix src/ or foxguard --fix src/app.py to apply supported taint fixes in place. Targets are checked against the canonical scan directory or the selected file; findings outside that scope are skipped. Python command-injection fixes add import subprocess when needed, preserving module docstrings and future imports. Review generated changes before committing.

Language Coverage

Language Built-in rules Taint tracking Framework-aware rules
JavaScript / TypeScript Yes Yes Express, Next.js
Python Yes Yes Django, Flask, FastAPI
Go Yes Yes Gin
Kotlin Yes Yes Spring
Java Yes Yes Spring
Ruby Yes Yes Rails
PHP Yes Yes Laravel
Rust Yes -- --
C# Yes Yes .NET
Swift Yes Yes iOS
Haskell Yes -- Cardano seed rules

Taint tracking also covers C, Bash, and Solidity. Config, manifest, and external-rule scans cover Dockerfile, Nginx, Apache, HAProxy, HCL/Terraform, YAML/JSON/XML/HTML, C via Semgrep YAML/Coccinelle, and more.

Security Modes

foxguard sca .
foxguard pqc .
foxguard --rules ./semgrep-rules .

SCA supports Cargo.lock, package-lock.json, pnpm-lock.yaml, requirements.txt, poetry.lock, and Pipfile.lock. The PQC audit is a two-sided scorecard: it flags quantum-vulnerable primitives (RSA, ECDSA/DSA, ECDH/DH) with CNSA 2.0 migration deadlines, and it also detects post-quantum algorithms already in use (ML-KEM, ML-DSA, SLH-DSA, FN-DSA, HQC, and hybrids like X25519MLKEM768) as informational, quantum-resistant inventory — reporting a migration-readiness percentage. Both sides export to a CycloneDX 1.6 CBOM, where post-quantum algorithms appear as quantum-resistant assets rather than vulnerabilities.

Configuration

foxguard auto-discovers .foxguard.yml from the scan path upward.

scan:
  baseline: .foxguard/baseline.json
  disable_rules: [py/no-eval]

secrets:
  exclude_paths: [fixtures, testdata]

Suppress an accepted finding inline with // foxguard: ignore[rule-id].

Documentation

Start with the documentation index. Key references: architecture, Semgrep/OpenGrep compatibility, and the release runbook.

Benchmarks

Repo LoC foxguard Semgrep Speedup
express 15K JS 0.28s 6.09s 22x
flask 14K Py 0.33s 6.51s 20x
gin 18K Go 0.50s 4.95s 10x
sentry 1.3M Py 35s 194s 5x

Reproduce with ./benchmarks/run.sh; results vary by machine. See benchmarks/README.md.

Contributing

See CONTRIBUTING.md for rule authoring, tests, and development setup.

License

MIT OR Apache-2.0 -- 0sec Labs

Project links

Data verified by PyPI on Sep 12, 2026
Data provided by the project maintainers, verified at the time the release was uploaded to PyPI.

Key dates

PyPI data
Data sourced directly from PyPI's database.
  • Released:
Latest release

1 maintainer

PyPI data
Data sourced directly from PyPI's database.
Avatar for peaktwilight from gravatar.com peaktwilight

GitHub Statistics

Data verified by PyPI on Sep 12, 2026
The GitHub source repository was provided by the project maintainers and verified by PyPI at the time of upload. Stars, forks, and open issues/PRs are derived from that repository and have not been independently verified.

License expression

MIT OR Apache-2.0
View SPDX License List

Requires

Python >=3.9

Report project as malware

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distributions

No source distribution files available for this release.See tutorial on generating distribution archives.

Built Distributions

If you're not sure about the file name format, learn more about wheel file names.

foxguard-0.13.1-py3-none-win_amd64.whl (9.9 MB view details)

Uploaded Python 3Windows x86-64

foxguard-0.13.1-py3-none-manylinux_2_28_x86_64.whl (10.4 MB view details)

Uploaded Python 3manylinux: glibc 2.28+ x86-64

foxguard-0.13.1-py3-none-manylinux_2_28_aarch64.whl (9.9 MB view details)

Uploaded Python 3manylinux: glibc 2.28+ ARM64

foxguard-0.13.1-py3-none-macosx_11_0_arm64.whl (10.2 MB view details)

Uploaded Python 3macOS 11.0+ ARM64

foxguard-0.13.1-py3-none-macosx_10_12_x86_64.whl (10.2 MB view details)

Uploaded Python 3macOS 10.12+ x86-64

File details

Details for the file foxguard-0.13.1-py3-none-win_amd64.whl.

File metadata

  • Download URL: foxguard-0.13.1-py3-none-win_amd64.whl
  • Upload date:
  • Size: 9.9 MB
  • Tags: Python 3, Windows x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for foxguard-0.13.1-py3-none-win_amd64.whl
Algorithm Hash digest
SHA256 d0c843ebd557bd2f4d52ae55f4e0fda7ee936256d48a4fd54287849230ad2b15
MD5 35d7be6436c3b1a94a90425f6c333bb7
BLAKE2b-256 fcadb3d5086ca21bbc147e9ccb04ddaafdba919738269af7d514a3a3c1eca892

See more details on using hashes here.

Provenance

The following attestation bundles were made for foxguard-0.13.1-py3-none-win_amd64.whl:

Publisher: workflow.yml on 0sec-labs/foxguard

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file foxguard-0.13.1-py3-none-manylinux_2_28_x86_64.whl.

File metadata

File hashes

Hashes for foxguard-0.13.1-py3-none-manylinux_2_28_x86_64.whl
Algorithm Hash digest
SHA256 f41974b2aa7547e22d3c5140aee27d94bf1240c303ac60d70a7fc7d90ee24fee
MD5 250bfa7594d831f546fb9b71221f5169
BLAKE2b-256 81eec631f79b79494ae94351b17585fbeff28d2272135502a2950d5fdf3892ed

See more details on using hashes here.

Provenance

The following attestation bundles were made for foxguard-0.13.1-py3-none-manylinux_2_28_x86_64.whl:

Publisher: workflow.yml on 0sec-labs/foxguard

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file foxguard-0.13.1-py3-none-manylinux_2_28_aarch64.whl.

File metadata

File hashes

Hashes for foxguard-0.13.1-py3-none-manylinux_2_28_aarch64.whl
Algorithm Hash digest
SHA256 eddf1ce7c9f4d52c6c3f0345096b70ea1a92ae84db3171af107b56eaae4af5cb
MD5 512280c43cac975e17ec33e97edc2da8
BLAKE2b-256 936175cccd9b5c0448b8a21816facbdeef8b38043a2977aee73d9f7da48d9e25

See more details on using hashes here.

Provenance

The following attestation bundles were made for foxguard-0.13.1-py3-none-manylinux_2_28_aarch64.whl:

Publisher: workflow.yml on 0sec-labs/foxguard

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file foxguard-0.13.1-py3-none-macosx_11_0_arm64.whl.

File metadata

File hashes

Hashes for foxguard-0.13.1-py3-none-macosx_11_0_arm64.whl
Algorithm Hash digest
SHA256 27f801ee993300cd52992f8cc300cd88a085b3dccecaed4bcc5b0ed67568e3d5
MD5 9b4d3eca8fcad5d5a698492fa403bc19
BLAKE2b-256 933d292654e06ee54a2439537fd46d7066ae8469b7e51b5c3db630135f25f051

See more details on using hashes here.

Provenance

The following attestation bundles were made for foxguard-0.13.1-py3-none-macosx_11_0_arm64.whl:

Publisher: workflow.yml on 0sec-labs/foxguard

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file foxguard-0.13.1-py3-none-macosx_10_12_x86_64.whl.

File metadata

File hashes

Hashes for foxguard-0.13.1-py3-none-macosx_10_12_x86_64.whl
Algorithm Hash digest
SHA256 d0ef0f5a13815a1d845288042931bc21100a0a427db8760e22e1197db857fa32
MD5 7883dcdf6d662aeffe20e9745536ef2b
BLAKE2b-256 2b8c8046082651eaa9030fdb57b45103eb7916a2c3c0acf43b240a4d22db022d

See more details on using hashes here.

Provenance

The following attestation bundles were made for foxguard-0.13.1-py3-none-macosx_10_12_x86_64.whl:

Publisher: workflow.yml on 0sec-labs/foxguard

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Release history Release notifications | RSS feed

This release

0.13.1 This release

5 files

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page