qwexvf/aegis-cli
CLI & TerminalSupply‑chain security scanner that checks CVEs, secret leaks, AST patterns and policy compliance across 16 package ecosystems without needing an account or backend
Features
- Batch CVE/GHSA lookup for 16 ecosystems with `FixedIn` version info via OSV.dev
- AST‑based capability scan detecting dangerous functions (shell spawn, network egress, dynamic eval, file writes outside root)
- Taint analysis revealing obfuscated C2 hostnames and indirect `eval` chains
- Hardcoded secret detection for AWS, GitHub, npm, Stripe, Slack tokens etc. in dependency source code
- GitHub Actions workflow scanning for unpinned actions, privilege escalation patterns and script injection
Recent releases
View all 31 releases →Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Install & Platforms
Install via
go
