vigihq
Vigilance reports the files that gained a power they did not have before, in any part of the SDLC.
A supply chain attack hides one bad change inside a normal release. Everything else in that release is genuine, so a list of changed files tells you nothing. Vigilance does not hunt for known bad code and does not care about CVEs. It reports the change that can now do something the last version could not.
pip install vigihq
vigi ./dist
The command is vigi. One binary, written in Go. It brings no Python
dependencies, opens no network connection, holds no credentials, and runs
nothing it reads. There is no AI in it.
In CI
vigi ./dist --report vigi-report.html
vigi ./dist --deny network-shell --sarif
--report writes one plain HTML file, black on white, that prints and survives
a mail client. --sarif writes SARIF 2.1.0 for a code scanning pipeline. A file
holding a denied power raises an alarm and the run exits 5.
Keeping watch
vigi setup
vigi watch /opt/app
vigi status
setup asks two questions, then installs a scheduled check using launchd,
systemd, cron or Task Scheduler, whichever the machine has. status says
whether those checks are alive and quiet.
On a server
vigi dpkg
vigi rpm
Reads the package manager's own record and asks whether the files on disk match what it says it installed. That record is root-owned, so it is a second witness a payload running as you cannot edit.
Full documentation is at https://vigihq.com/docs
Commercial software. Free tier and Pro at https://vigihq.com Questions go to support@vigihq.com
1 maintainer
Metadata
1 maintainer
Release files for vigihq 0.2.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Built distributions (wheels)
| File | Reset | |||
|---|---|---|---|---|
| vigihq-0.2.0-py3-none-win_arm64.whl | Python 3 | none | Windows ARM64 | Details |
| vigihq-0.2.0-py3-none-win_amd64.whl | Python 3 | none | Windows x86-64 | Details |
| vigihq-0.2.0-py3-none-musllinux_1_1_x86_64.whl | Python 3 | none | Linux musl 1.1+ x86-64 | Details |
| vigihq-0.2.0-py3-none-musllinux_1_1_aarch64.whl | Python 3 | none | Linux musl 1.1+ ARM64 | Details |
| vigihq-0.2.0-py3-none-manylinux2014_x86_64.whl | Python 3 | none | Linux glibc 2.17+ x86-64 | Details |
| vigihq-0.2.0-py3-none-manylinux2014_aarch64.whl | Python 3 | none | Linux glibc 2.17+ ARM64 | Details |
| vigihq-0.2.0-py3-none-macosx_11_0_arm64.whl | Python 3 | none | macOS 11.0+ ARM64 | Details |
| vigihq-0.2.0-py3-none-macosx_10_9_x86_64.whl | Python 3 | none | macOS 10.9+ x86-64 | Details |
Total release size: 31.0 MB
Release files / vigihq-0.2.0-py3-none-win_arm64.whl
| Download URL | vigihq-0.2.0-py3-none-win_arm64.whl |
|---|---|
| Size | 3.7 MB |
| Tags | Python 3 Windows ARM64 |
|
SHA-256 checksum How to use checksums |
8a1fb0852faa28b90bc966922c189eea68cc31044d586aa561c62ceee6fde006
|
|
BLAKE2b-256 checksum How to use checksums |
29014194843117292ae2dc063f798531c0b7a42b22647aa5eef62a85e32aae12
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.11.15
|
Release files / vigihq-0.2.0-py3-none-win_amd64.whl
| Download URL | vigihq-0.2.0-py3-none-win_amd64.whl |
|---|---|
| Size | 4.1 MB |
| Tags | Python 3 Windows x86-64 |
|
SHA-256 checksum How to use checksums |
d81ecb41190a21cd8884abbeb51162a1bd2c497a42771399b09f2c0fcef28d89
|
|
BLAKE2b-256 checksum How to use checksums |
4840d14f97ee5e810a3551edbdb7598a2ba2d47147d212695bda36f6750594cc
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.11.15
|
Release files / vigihq-0.2.0-py3-none-musllinux_1_1_x86_64.whl
| Download URL | vigihq-0.2.0-py3-none-musllinux_1_1_x86_64.whl |
|---|---|
| Size | 4.0 MB |
| Tags | Linux musl 1.1+ x86-64 Python 3 |
|
SHA-256 checksum How to use checksums |
9d5070be707a04e720025a19e0df533e959b299c61eec577e1dc7cef4a490d9c
|
|
BLAKE2b-256 checksum How to use checksums |
3dd4784d7d1bd2ee75ce5730d748bb46ffefcd42e5aca208777250194f7da3f0
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.11.15
|
Release files / vigihq-0.2.0-py3-none-musllinux_1_1_aarch64.whl
| Download URL | vigihq-0.2.0-py3-none-musllinux_1_1_aarch64.whl |
|---|---|
| Size | 3.6 MB |
| Tags | Linux musl 1.1+ ARM64 Python 3 |
|
SHA-256 checksum How to use checksums |
ea804c9d6e46a3f88e1b8d96c43ee4142379ecb156eee3aef3bfc28f3a109341
|
|
BLAKE2b-256 checksum How to use checksums |
2e23968be60b48e717b43225e5aa471468a7eddda52333e5022d7d409ea534fd
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.11.15
|
Release files / vigihq-0.2.0-py3-none-manylinux2014_x86_64.whl
| Download URL | vigihq-0.2.0-py3-none-manylinux2014_x86_64.whl |
|---|---|
| Size | 4.0 MB |
| Tags | Linux glibc 2.17+ x86-64 Python 3 |
|
SHA-256 checksum How to use checksums |
44ab20a2f27763f998e3ee3e54f3487bc9b3a1dd6a4fa7944e0bf3859f49fecb
|
|
BLAKE2b-256 checksum How to use checksums |
887ea62a798dccd1725e3f484b4676fb9edcb54b8de6e06b039fcf8bb0c7f8d1
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.11.15
|
Release files / vigihq-0.2.0-py3-none-manylinux2014_aarch64.whl
| Download URL | vigihq-0.2.0-py3-none-manylinux2014_aarch64.whl |
|---|---|
| Size | 3.6 MB |
| Tags | Linux glibc 2.17+ ARM64 Python 3 |
|
SHA-256 checksum How to use checksums |
1f869671f9dc8198cd01ed1aab15b472ec053f87f107d45020abae5a062603eb
|
|
BLAKE2b-256 checksum How to use checksums |
89de684630d23850151ed65ab070e5c2465c93cee0f4d8c88344ee5bca159071
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.11.15
|
Release files / vigihq-0.2.0-py3-none-macosx_11_0_arm64.whl
| Download URL | vigihq-0.2.0-py3-none-macosx_11_0_arm64.whl |
|---|---|
| Size | 3.8 MB |
| Tags | Python 3 macOS 11.0+ ARM64 |
|
SHA-256 checksum How to use checksums |
f5709a9066bbfcef5446bdbc8196cd7a4367d82ab3160697727610a67a01a9b3
|
|
BLAKE2b-256 checksum How to use checksums |
cf4ecdf64155a8528149b2205871d311f6610ffb98ef973d8a5ba2af31d4cf91
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.11.15
|
Release files / vigihq-0.2.0-py3-none-macosx_10_9_x86_64.whl
| Download URL | vigihq-0.2.0-py3-none-macosx_10_9_x86_64.whl |
|---|---|
| Size | 4.1 MB |
| Tags | Python 3 macOS 10.9+ x86-64 |
|
SHA-256 checksum How to use checksums |
20d76d5b356bc529cb99fea01865e108d1c1068a4b48bd6c901bce9c08e975d1
|
|
BLAKE2b-256 checksum How to use checksums |
49b821ee6b2ee6e60d43452c1150bef541a2241aab222fc2452dc9bfc6fc5e91
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.11.15
|
Security for vigihq 0.2.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.
