sarif

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

Security-focused linter for Docker Compose files. Catches dangerous misconfigurations before they reach production. Grounded in OWASP and CIS Docker Benchmark.

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.