ossguard 0.1.3a3

One-command CLI to guard any OSS project with OpenSSF security best practices — bootstrap, scan, and monitor.

OSSGuard — Python Implementation

The reference Python implementation of OSSGuard.

For full documentation, all install methods, and command examples, see the main ossguard repo.

Install

pip install ossguard

# Or with pipx (isolated install)
pipx install ossguard

Quick Start

ossguard scan .       # Quick security posture check
ossguard audit .      # Full security audit
ossguard init .       # Bootstrap all OpenSSF configs
ossguard baseline .   # OSPS Baseline compliance

Features

This is the reference implementation with the richest UI (Rich tables, colored panels, interactive prompts).

• 27 commands covering the full OpenSSF security lifecycle
• Rich terminal UI with tables, panels, and progress indicators
• Auto-detection of languages, package managers, and frameworks
• Python 3.9+ with dependencies: typer, rich, pyyaml, jinja2, questionary, httpx

For the complete command reference and real-world output examples, see the main ossguard README.

Other Implementations

Implementation	Install	Best for
ossguard-go	brew install kirankotari/tap/ossguard	CI pipelines, single binary
ossguard-npm	npx ossguard	Node.js projects

Development

# Clone and install
git clone https://github.com/kirankotari/ossguard-python.git
cd ossguard-python
pip install -e ".[dev]"

# Run tests (147 tests)
pytest

# Lint
ruff check src/ tests/

Contributing

Contributions are welcome! Please see CONTRIBUTING.md for guidelines.

License

Apache-2.0 — see LICENSE for details.