devsec-tools

DevSec Tools

DevSec Tools is a suite of tools that are useful for DevSecOps workflows. Its goal is to simplify and streamline the process of developing, securing, and operating software and systems for the web.

This package provides both lower-level Go libraries, as well as a CLI tool for running security scans. It is the CLI equivalent to devsec.tools.

CLI usage

devsec-tools --help

Check supported HTTP versions for a domain

[!TIP] If you do not provide a scheme, devsec-tools will assume https:. If you explicitly want to test http:, you should specify that in the domain name.

devsec-tools http --help
devsec-tools http apple.com

devsec-tools http http://localhost:8080

Check supported TLS versions and cipher suites for a domain

devsec-tools tls --help
devsec-tools tls google.com

Modes

CLI

When installed locally, devsec-tools will run in CLI-mode and operate just like any other CLI tool.

Lambda

When deployed to an AWS Lambda environment, devsec-tools will run in Lambda-mode and will look for events received from endpoints via Amazon API Gateway v2.

Other?

In the future we may add more modes, depending on support from cloud serverless providers.

We are also planning to investigate the feasibility of WASM/WASI compatibility, as well as compatibility with TinyGo.

Documentation

More thorough documentation can be found in the ./docs/ directory of this repository.