A security scanning CLI tool that detects vulnerabilities, secrets, and outdated dependencies across multiple programming languages.
Hawkeye scanner-cli is an open-source security scanning tool that identifies vulnerabilities, exposed secrets, and outdated dependencies in software projects. It integrates into development workflows via pre-commit hooks and CI/CD pipelines to provide automated security feedback across multiple programming languages.
Development and DevOps teams building applications in Node.js, Ruby, Python, PHP, Java, Kotlin, Scala, or Rust who need automated security scanning within their CI/CD pipelines.
It offers a unified, extensible CLI that wraps multiple language-specific security tools, reducing the need for separate scanning setups and providing consistent reporting across diverse tech stacks.
A project security/vulnerability/risk scanning tool
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Automatically detects and scans projects in Node.js, Ruby, Python, PHP, Java, Kotlin, Scala, and Rust based on file structures like package.json or Gemfile, reducing manual configuration.
Uses pluggable modules that wrap third-party tools like Bandit and OWASP Dependency Checker, allowing for customizable security checks without reinventing the wheel.
Supports console, JSON, HTTP endpoints, and SumoLogic for reporting, making it easy to integrate results into existing monitoring or CI/CD systems.
Provides Docker images and npm installation, with documented examples for pipelines like GoCD, streamlining automation in development workflows.
The project has reached end of life, meaning no bug fixes, security updates, or support for new tools or vulnerabilities, posing significant risks for ongoing use.
Modules like files-entropy are disabled by default due to frequent false positives, requiring manual tuning and potentially missing real issues without careful configuration.
Relies on wrapped third-party scanners that may themselves be outdated or unsupported, compounding maintenance issues and reducing scan accuracy over time.
With the project deprecated, documentation is static and community support is minimal, making troubleshooting and extension difficult for new users.