argus-codescan-mcp good first issues (Python)

[AI] Scan AI agent rules files for hidden prompt injection (.cursorrules, AGENTS.md, CLAUDE.md, copilot-instructions) about 5 hours ago

enhancement help wanted

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[Malware] Invisible Unicode and Trojan Source: zero-width, variation selectors, bidi overrides about 11 hours ago

enhancement help wanted good first issue

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[AI] AI code scanning: LLM output flowing into eval, shell, SQL and HTML (OWASP LLM05) about 13 hours ago

enhancement help wanted

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[AI] AI-assisted malware triage: MCP tool that explains why a suspicious file looks malicious about 14 hours ago

enhancement help wanted

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[AI] Scan MCP client configs: unpinned servers, lookalike names, inline secrets, remote http about 14 hours ago

enhancement help wanted

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[AI] Scan MCP server source for tool poisoning and rug pulls about 14 hours ago

enhancement help wanted

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[AI] Detect dangerous AI agent hooks and permissions (.claude/settings.json, .vscode/tasks.json, auto-approve flags) about 14 hours ago

enhancement help wanted

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[Malware] Scan installed VS Code / Cursor / Open VSX extensions about 14 hours ago

enhancement help wanted

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[Malware] Optional YARA scanning with community rule sets about 14 hours ago

enhancement help wanted

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[Malware] Obfuscated JavaScript and crypto-wallet hijacking (chalk/debug-style payloads) about 14 hours ago

enhancement help wanted

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[CI/CD] GitHub Actions: pwn requests, script injection and cache poisoning about 14 hours ago

enhancement help wanted

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[CI/CD] GitHub Actions: flag third-party actions not pinned to a full commit SHA about 14 hours ago

enhancement good first issue

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[Supply chain] Typosquats and slopsquats: dependency names that imitate popular or AI-hallucinated packages about 14 hours ago

enhancement help wanted

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[Supply chain] Check dependencies against OSV known-malicious packages (MAL-* advisories) about 14 hours ago

enhancement help wanted

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[Supply chain] Flag dependencies installed from URLs, tarballs and git (remote dynamic dependencies) about 14 hours ago

enhancement good first issue

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[Malware] Python install-time execution: setup.py cmdclass overrides and .pth files about 14 hours ago

enhancement help wanted

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[Malware] Flag binding.gyp and native build hooks that run shell commands about 14 hours ago

enhancement good first issue

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[Malware] Detect worm self-propagation: package code that publishes other packages about 14 hours ago

enhancement help wanted

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[Malware] Detect credential-harvesting payloads (tokens, cloud metadata, Vault, kubeconfig + exfil) about 14 hours ago

enhancement help wanted

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[Malware] Flag npm lifecycle scripts that download or run code at install time about 14 hours ago

enhancement help wanted

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[Access control] Flag exposed admin/debug endpoints (Actuator *, H2 console, pprof, GraphQL introspection) about 21 hours ago

enhancement help wanted

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[Rules] sql-concat flags any line containing SELECT/UPDATE/DELETE (43 false positives on Argus itself) about 22 hours ago

bug help wanted

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[Access control] Spring and .NET: flag permitAll() on everything, @PermitAll, [AllowAnonymous] 1 day ago

enhancement help wanted

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[Access control] Rails, Laravel, Node: flag skipped auth, withoutMiddleware('auth'), reflective CORS with credentials 1 day ago

enhancement help wanted

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[CLI] Explain when --fail-on fails on findings hidden by --classification 1 day ago

enhancement help wanted good first issue

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[Rules] command-injection flags safe subprocess calls with argument lists 4 days ago

bug help wanted

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[Access control] Detect JWTs decoded without signature verification (PyJWT, jsonwebtoken, jjwt, golang-jwt) 5 days ago

enhancement help wanted good first issue

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[Access control] Python: flag AllowAny, empty authentication_classes, @csrf_exempt 5 days ago

enhancement help wanted good first issue

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

👋 Contributors welcome: start here 7 days ago

documentation help wanted good first issue

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[Access control] Detect routes with no authentication (design: bundled Semgrep rules) 7 days ago

enhancement help wanted question

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[Tracking] Detect unprotected endpoints and broken access control 7 days ago

enhancement help wanted

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[Deps] Upgrade vitest and @vscode/vsce (dev-only CVEs); drop Node 18 from CI 7 days ago

enhancement help wanted

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[Docker] Add govulncheck and composer to the image 7 days ago

enhancement help wanted good first issue

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[npm] scan sca: audit every project in a monorepo and mark runtime vs dev 7 days ago

enhancement help wanted

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[Feature] Align release versions across python, languages, and npm packages 8 days ago

enhancement help wanted

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[Feature] Add integration tests for CLI, MCP server, and --fail-on CI behavior 8 days ago

enhancement help wanted

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[AI] VS Code: Ask AI to fix — copy finding context to prompt 8 days ago

enhancement help wanted

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[CI/CD] Cloud dashboard upload in GitHub Actions (ARGUS_API_KEY secret) 8 days ago

enhancement help wanted

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[CI/CD] Reusable composite action: argus-code-scanning/argus-scan 8 days ago

enhancement help wanted

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[AI] Batch apply_fix with diff preview for autofixable findings 8 days ago

enhancement help wanted

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[CI/CD] GitLab CI template and MR scan integration 8 days ago

enhancement help wanted

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[Privacy] Built-in PII scanner: emails, phones, SSN, names in code and config 8 days ago

enhancement help wanted

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[Data Policy] PII and sensitive-data redaction in reports, JSON, and SARIF 8 days ago

enhancement help wanted

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[Data Policy] argus.yml data handling policy: upload, retention, and field controls 8 days ago

enhancement help wanted

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[Data Policy] Cloud upload: sanitize findings before POST to dashboard 8 days ago

enhancement help wanted

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[AI] MCP tool: sanitize_report for safe sharing with LLM clients 8 days ago

enhancement help wanted

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[Compliance] HIPAA PHI handling checks in application and infra code 8 days ago

enhancement help wanted good first issue

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[Privacy] GDPR and CCPA static rule pack 8 days ago

enhancement help wanted good first issue

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[CI/CD] Scheduled nightly security scan workflow 8 days ago

enhancement help wanted good first issue

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[Privacy] Docs: data processing model and privacy FAQ for Argus scans 8 days ago

documentation enhancement help wanted good first issue

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[Local Review] Docs + cookbook prompts for local code review 20 days ago

documentation enhancement help wanted good first issue

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[Local Review] Pre-commit hook example using argus review --staged 20 days ago

enhancement help wanted good first issue

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[good first issue] Add malware rule for curl|bash download cradles 20 days ago

enhancement help wanted good first issue

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[good first issue] Add one PII-in-logs rule (email f-string / logger) 22 days ago

enhancement help wanted good first issue

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[good first issue] Docs: how to add a YAML security rule (5-minute guide) 22 days ago

documentation help wanted good first issue

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[good first issue] Example .argus.yml excludes for test fixtures (malware noise) 22 days ago

documentation help wanted good first issue

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[good first issue] Docs: 8 MCP prompt examples for Argus scans 24 days ago

documentation help wanted good first issue

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

[good first issue] Add 3 crypto-miner pool hostnames to malware.yaml 24 days ago

enhancement help wanted good first issue

argus-code-scanning/argus-codescan-mcp

8

Argus — open-source security scanner with many eyes. SAST, DAST, SCA, Secrets, IaC, Terraform, and Ansible scanning via CLI and MCP.

Python

#cursor#devsecops#mcp#sarif#sast#security

argus-code-scanning/argus-codescan-mcp

Open Issues Need Help