DevSec Tools is a suite of tools that are useful for DevSecOps workflows. Its goal is to simplify and streamline the process of developing, securing, and operating software and systems for the web.
This package provides both lower-level Go libraries, as well as a CLI tool for running security scans. It is the CLI equivalent to devsec.tools.
devsec-tools --helpTip
If you do not provide a scheme, devsec-tools will assume https:. If you explicitly want to test http:, you should specify that in the domain name.
devsec-tools http --help
devsec-tools http apple.comdevsec-tools http http://localhost:8080devsec-tools tls --help
devsec-tools tls google.comWhen installed locally, devsec-tools will run in CLI-mode and operate just like any other CLI tool.
When deployed to an AWS Lambda environment, devsec-tools will run in Lambda-mode and will look for events received from endpoints via Amazon API Gateway v2.
In the future we may add more modes, depending on support from cloud serverless providers.
We are also planning to investigate the feasibility of WASM/WASI compatibility, as well as compatibility with TinyGo.
More thorough documentation can be found in the ./docs/ directory of this repository.