|
9 | 9 | <br/> |
10 | 10 | scan · diff · secrets · post-quantum crypto audit · interactive TUI triage |
11 | 11 | <br/> |
12 | | - 170+ built-in rules across 10 languages · cross-file taint tracking · Semgrep-compatible YAML bridge |
| 12 | + 170+ built-in rules across 11 languages · cross-file taint tracking · Semgrep-compatible YAML bridge |
13 | 13 | <br/><br/> |
14 | 14 | <a href="https://foxguard.dev">foxguard.dev</a> · <a href="https://www.npmjs.com/package/foxguard">npm</a> · <a href="https://crates.io/crates/foxguard">crates.io</a> |
15 | 15 | </p> |
|
33 | 33 | <br/><em><code>foxguard tui .</code> — interactive triage with scan, diff, secrets, and PQ modes. <a href="https://foxguard.dev/blog/foxguard-0-7-0-tui-launch">Launch post</a>.</em> |
34 | 34 | </p> |
35 | 35 |
|
36 | | -foxguard is a security scanner you can run on every save. A single Rust binary with 170+ built-in rules across 10 languages, cross-file taint tracking, Semgrep-compatible YAML loading, and four top-level modes — general scan, diff-against-branch, secrets, and post-quantum crypto audit — all reachable from the same CLI or interactive TUI. |
| 36 | +foxguard is a security scanner you can run on every save. A single Rust binary with 170+ built-in rules across 10 source languages, plus C via Semgrep-compatible YAML rule packs (kernel/dirty-frag class shipped), cross-file taint tracking, Semgrep-compatible YAML loading, and four top-level modes — general scan, diff-against-branch, secrets, and post-quantum crypto audit — all reachable from the same CLI or interactive TUI. |
37 | 37 |
|
38 | 38 | It is fast enough for pre-commit hooks and the `--changed` path runs in milliseconds on a real repo. Output formats: terminal, JSON, SARIF (for GitHub Code Scanning), and CycloneDX 1.6 CBOM. |
39 | 39 |
|
@@ -168,7 +168,7 @@ Sentry is the stress target at ~1.3M Python LoC: foxguard scans the whole tree i |
168 | 168 |
|
169 | 169 | ## Rules |
170 | 170 |
|
171 | | -170+ built-in rules across 10 languages, covering SQL injection, XSS, SSRF, command injection, hardcoded secrets, weak crypto, unsafe deserialization, log injection, PQ-vulnerable crypto, crypto-agility, and framework-specific checks. Full per-rule coverage, precision tiers, and false-positive methodology live in [docs/precision.md](docs/precision.md) and on the [rules page at foxguard.dev](https://foxguard.dev/rules). |
| 171 | +170+ built-in rules across 10 source languages, plus C via Semgrep-compatible YAML rule packs (kernel/dirty-frag class shipped), covering SQL injection, XSS, SSRF, command injection, hardcoded secrets, weak crypto, unsafe deserialization, log injection, PQ-vulnerable crypto, crypto-agility, and framework-specific checks. Full per-rule coverage, precision tiers, and false-positive methodology live in [docs/precision.md](docs/precision.md) and on the [rules page at foxguard.dev](https://foxguard.dev/rules). |
172 | 172 |
|
173 | 173 | ## Configuration |
174 | 174 |
|
|
0 commit comments