argus-scan 0.1.0__tar.gz

argus_scan-0.1.0/.gitignore

@@ -0,0 +1,44 @@
+# Python
+__pycache__/
+*.py[cod]
+*$py.class
+*.so
+.Python
+build/
+dist/
+*.egg-info/
+.eggs/
+.venv/
+venv/
+env/
+.pytest_cache/
+.mypy_cache/
+.ruff_cache/
+htmlcov/
+.coverage
+*.cover
+
+# Node.js / npm
+node_modules/
+dist/
+*.js.map
+*.d.ts
+*.d.ts.map
+
+# VS Code
+.vscode/
+*.vsix
+
+# OS
+.DS_Store
+Thumbs.db
+
+# Environment
+.env
+.env.local
+*.env
+
+# Temporary scan output
+*.sarif
+zap-report.json
+trivy-report.json

argus_scan-0.1.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 codetesting-mcp contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

argus_scan-0.1.0/PKG-INFO

@@ -0,0 +1,189 @@
+Metadata-Version: 2.4
+Name: argus-scan
+Version: 0.1.0
+Summary: Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, Ansible via CLI and MCP.
+Project-URL: Homepage, https://github.com/your-org/argus-mcp
+Project-URL: Repository, https://github.com/your-org/argus-mcp
+Project-URL: Issues, https://github.com/your-org/argus-mcp/issues
+Project-URL: Documentation, https://github.com/your-org/argus-mcp/blob/main/README.md
+License: MIT License
+        
+        Copyright (c) 2026 codetesting-mcp contributors
+        
+        Permission is hereby granted, free of charge, to any person obtaining a copy
+        of this software and associated documentation files (the "Software"), to deal
+        in the Software without restriction, including without limitation the rights
+        to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+        copies of the Software, and to permit persons to whom the Software is
+        furnished to do so, subject to the following conditions:
+        
+        The above copyright notice and this permission notice shall be included in all
+        copies or substantial portions of the Software.
+        
+        THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+        IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+        FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+        AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+        LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+        OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+        SOFTWARE.
+License-File: LICENSE
+Keywords: ai,ansible-lint,argus,bandit,code-scanning,dast,devsecops,gitleaks,mcp,owasp-zap,sast,sca,security,semgrep,tfsec,trivy,vulnerability
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Topic :: Security
+Classifier: Topic :: Software Development :: Testing
+Requires-Python: >=3.10
+Requires-Dist: anyio>=4.0.0
+Requires-Dist: mcp>=1.0.0
+Provides-Extra: all-tools
+Requires-Dist: ansible-lint>=6.0.0; extra == 'all-tools'
+Requires-Dist: bandit>=1.7.0; extra == 'all-tools'
+Requires-Dist: checkov>=3.0.0; extra == 'all-tools'
+Requires-Dist: detect-secrets>=1.4.0; extra == 'all-tools'
+Requires-Dist: flake8-bandit>=4.0.0; extra == 'all-tools'
+Requires-Dist: flake8>=6.0.0; extra == 'all-tools'
+Requires-Dist: pip-audit>=2.0.0; extra == 'all-tools'
+Requires-Dist: safety>=3.0.0; extra == 'all-tools'
+Requires-Dist: semgrep>=1.0.0; extra == 'all-tools'
+Provides-Extra: dev
+Requires-Dist: mypy>=1.0.0; extra == 'dev'
+Requires-Dist: pytest-asyncio>=0.23.0; extra == 'dev'
+Requires-Dist: pytest-cov>=4.0.0; extra == 'dev'
+Requires-Dist: pytest>=7.0.0; extra == 'dev'
+Requires-Dist: ruff>=0.1.0; extra == 'dev'
+Description-Content-Type: text/markdown
+
+# argus-mcp (Python)
+
+An **MCP server** that gives AI assistants (Claude, Cursor, etc.) the ability to run comprehensive security scans on your codebase.
+
+## What It Does
+
+Exposes the following **MCP tools** for use by any MCP-compatible AI client:
+
+| Tool | Description | Scanners |
+|------|-------------|----------|
+| `scan_sast` | Static code analysis | Semgrep, Bandit, ESLint-security |
+| `scan_dast` | Dynamic web app scanning | OWASP ZAP, Nikto |
+| `scan_sca` | Dependency vulnerability scanning | Trivy, Safety, pip-audit, npm audit |
+| `scan_secrets` | Leaked secrets & credentials | Gitleaks, detect-secrets, TruffleHog |
+| `scan_iac` | IaC misconfiguration scanning | Checkov, Trivy config, Terrascan |
+| `scan_container` | Container image scanning | Trivy |
+| `scan_all` | Full scan (all of the above) | All tools |
+| `check_tools` | Check tool availability | — |
+
+## Installation
+
+```bash
+pip install argus-scan
+```
+
+Install with all Python-native security tools:
+
+```bash
+pip install "argus-scan[all-tools]"
+```
+
+## Usage
+
+### Run the MCP Server
+
+```bash
+argus-mcp
+```
+
+The server communicates via **stdio** (standard MCP transport).
+
+### Configure in Cursor / Claude Desktop
+
+Add to your MCP configuration (`~/.cursor/mcp.json` or `claude_desktop_config.json`):
+
+```json
+{
+  "mcpServers": {
+    "argus": {
+      "command": "argus-scan"
+    }
+  }
+}
+```
+
+Or with `uvx` (no installation required):
+
+```json
+{
+  "mcpServers": {
+    "argus": {
+      "command": "uvx",
+      "args": ["argus-scan"]
+    }
+  }
+}
+```
+
+## External Tool Dependencies
+
+The MCP server wraps these external tools. Install the ones you need:
+
+### SAST
+```bash
+pip install semgrep bandit flake8 flake8-bandit   # Python SAST
+npm install -g eslint eslint-plugin-security       # JS/TS SAST
+```
+
+### DAST
+```bash
+docker pull ghcr.io/zaproxy/zaproxy:stable         # OWASP ZAP (recommended)
+brew install nikto                                  # Nikto
+```
+
+### SCA
+```bash
+# Trivy (cross-platform)
+brew install trivy
+# OR
+curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh
+
+pip install safety pip-audit                        # Python SCA
+```
+
+### Secret Scanning
+```bash
+brew install gitleaks trufflehog                   # macOS
+pip install detect-secrets                          # cross-platform
+```
+
+### IaC
+```bash
+pip install checkov                                 # Checkov
+brew install terrascan                              # Terrascan
+```
+
+## Example: Ask Claude to Scan Your Code
+
+Once configured, you can ask:
+
+- *"Scan `/path/to/myproject` for security vulnerabilities"*
+- *"Check my Python code for OWASP Top 10 issues using Semgrep"*
+- *"Are there any hardcoded secrets in this repository?"*
+- *"Scan my Kubernetes manifests for misconfigurations"*
+- *"Run a full security audit of my codebase"*
+
+## Development
+
+```bash
+git clone https://github.com/your-org/argus-mcp
+cd argus-mcp/packages/python
+pip install -e ".[dev]"
+pytest
+```
+
+## License
+
+MIT

argus_scan-0.1.0/README.md

@@ -0,0 +1,128 @@
+# argus-mcp (Python)
+
+An **MCP server** that gives AI assistants (Claude, Cursor, etc.) the ability to run comprehensive security scans on your codebase.
+
+## What It Does
+
+Exposes the following **MCP tools** for use by any MCP-compatible AI client:
+
+| Tool | Description | Scanners |
+|------|-------------|----------|
+| `scan_sast` | Static code analysis | Semgrep, Bandit, ESLint-security |
+| `scan_dast` | Dynamic web app scanning | OWASP ZAP, Nikto |
+| `scan_sca` | Dependency vulnerability scanning | Trivy, Safety, pip-audit, npm audit |
+| `scan_secrets` | Leaked secrets & credentials | Gitleaks, detect-secrets, TruffleHog |
+| `scan_iac` | IaC misconfiguration scanning | Checkov, Trivy config, Terrascan |
+| `scan_container` | Container image scanning | Trivy |
+| `scan_all` | Full scan (all of the above) | All tools |
+| `check_tools` | Check tool availability | — |
+
+## Installation
+
+```bash
+pip install argus-scan
+```
+
+Install with all Python-native security tools:
+
+```bash
+pip install "argus-scan[all-tools]"
+```
+
+## Usage
+
+### Run the MCP Server
+
+```bash
+argus-mcp
+```
+
+The server communicates via **stdio** (standard MCP transport).
+
+### Configure in Cursor / Claude Desktop
+
+Add to your MCP configuration (`~/.cursor/mcp.json` or `claude_desktop_config.json`):
+
+```json
+{
+  "mcpServers": {
+    "argus": {
+      "command": "argus-scan"
+    }
+  }
+}
+```
+
+Or with `uvx` (no installation required):
+
+```json
+{
+  "mcpServers": {
+    "argus": {
+      "command": "uvx",
+      "args": ["argus-scan"]
+    }
+  }
+}
+```
+
+## External Tool Dependencies
+
+The MCP server wraps these external tools. Install the ones you need:
+
+### SAST
+```bash
+pip install semgrep bandit flake8 flake8-bandit   # Python SAST
+npm install -g eslint eslint-plugin-security       # JS/TS SAST
+```
+
+### DAST
+```bash
+docker pull ghcr.io/zaproxy/zaproxy:stable         # OWASP ZAP (recommended)
+brew install nikto                                  # Nikto
+```
+
+### SCA
+```bash
+# Trivy (cross-platform)
+brew install trivy
+# OR
+curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh
+
+pip install safety pip-audit                        # Python SCA
+```
+
+### Secret Scanning
+```bash
+brew install gitleaks trufflehog                   # macOS
+pip install detect-secrets                          # cross-platform
+```
+
+### IaC
+```bash
+pip install checkov                                 # Checkov
+brew install terrascan                              # Terrascan
+```
+
+## Example: Ask Claude to Scan Your Code
+
+Once configured, you can ask:
+
+- *"Scan `/path/to/myproject` for security vulnerabilities"*
+- *"Check my Python code for OWASP Top 10 issues using Semgrep"*
+- *"Are there any hardcoded secrets in this repository?"*
+- *"Scan my Kubernetes manifests for misconfigurations"*
+- *"Run a full security audit of my codebase"*
+
+## Development
+
+```bash
+git clone https://github.com/your-org/argus-mcp
+cd argus-mcp/packages/python
+pip install -e ".[dev]"
+pytest
+```
+
+## License
+
+MIT

argus_scan-0.1.0/pyproject.toml

@@ -0,0 +1,92 @@
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[project]
+name = "argus-scan"
+version = "0.1.0"
+description = "Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, Ansible via CLI and MCP."
+readme = "README.md"
+license = { file = "LICENSE" }
+requires-python = ">=3.10"
+keywords = [
+    "argus", "mcp", "security", "sast", "dast", "sca", "devsecops",
+    "semgrep", "bandit", "trivy", "owasp-zap", "gitleaks", "tfsec",
+    "ansible-lint", "code-scanning", "vulnerability", "ai",
+]
+classifiers = [
+    "Development Status :: 4 - Beta",
+    "Intended Audience :: Developers",
+    "License :: OSI Approved :: MIT License",
+    "Programming Language :: Python :: 3",
+    "Programming Language :: Python :: 3.10",
+    "Programming Language :: Python :: 3.11",
+    "Programming Language :: Python :: 3.12",
+    "Topic :: Security",
+    "Topic :: Software Development :: Testing",
+]
+dependencies = [
+    "mcp>=1.0.0",
+    "anyio>=4.0.0",
+]
+
+[project.optional-dependencies]
+# Install all Python-native security tools
+all-tools = [
+    "semgrep>=1.0.0",
+    "bandit>=1.7.0",
+    "flake8>=6.0.0",
+    "flake8-bandit>=4.0.0",
+    "safety>=3.0.0",
+    "pip-audit>=2.0.0",
+    "detect-secrets>=1.4.0",
+    "checkov>=3.0.0",
+    "ansible-lint>=6.0.0",
+]
+dev = [
+    "pytest>=7.0.0",
+    "pytest-asyncio>=0.23.0",
+    "pytest-cov>=4.0.0",
+    "mypy>=1.0.0",
+    "ruff>=0.1.0",
+]
+
+[project.scripts]
+# Primary CLI — works with no AI subscription
+argus         = "argus.cli:run"
+# Alias for MCP clients that reference the full package name
+argus-mcp     = "argus.cli:run"
+
+[project.urls]
+Homepage      = "https://github.com/your-org/argus-mcp"
+Repository    = "https://github.com/your-org/argus-mcp"
+Issues        = "https://github.com/your-org/argus-mcp/issues"
+Documentation = "https://github.com/your-org/argus-mcp/blob/main/README.md"
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/argus"]
+
+[tool.hatch.build.targets.sdist]
+include = [
+    "/src",
+    "/tests",
+    "/README.md",
+    "/LICENSE",
+]
+
+[tool.pytest.ini_options]
+asyncio_mode = "auto"
+testpaths = ["tests"]
+
+[tool.mypy]
+python_version = "3.10"
+strict = false
+ignore_missing_imports = true
+
+[tool.ruff]
+line-length = 100
+target-version = "py310"
+
+[tool.ruff.lint]
+select = ["E", "F", "W", "I", "UP"]
+ignore = ["E501"]

argus_scan-0.1.0/src/argus/__init__.py

@@ -0,0 +1,7 @@
+"""argus-mcp: MCP server for code security testing.
+
+Provides SAST, DAST, SCA, secret scanning, and IaC security scanning
+via the Model Context Protocol.
+"""
+__version__ = "0.1.0"
+__all__ = ["__version__"]