argus

# Argus - Repository Analysis and Security Assessment Tool A powerful Model Context Protocol (MCP) tool for analyzing code repositories, performing security scans, and assessing code quality across multiple programming languages. ## Features - **Multi-Language Support** - Go: gocyclo, golangci-lint analysis - Java: PMD static analysis - Python: Pylint, Bandit security checks - JavaScript/TypeScript: ESLint analysis - Automatic language detection - **Security Scanning** - Integrated Trivy vulnerability scanner - Comprehensive security reports - Support for multiple branches - **Git Operations** - Branch enumeration and management - Commit history analysis - Diff comparisons - Repository structure visualization ## Installation ### Prerequisites - Python 3.8+ - Git - libmagic (system dependency) ### System Dependencies #### macOS ```bash brew install libmagic ``` #### Linux (Ubuntu/Debian) ```bash sudo apt-get update sudo apt-get install -y libmagic1 ``` ### Installation via uv ```bash uvx argus ``` ## Usage ### Basic MCP Commands ```python # Analyze repository structure analyze_repository_structure( repo_url="https://gitlab.com/user/repo", gitlab_credentials={"api_key": "your-token"}, # Optional branch="main" # Optional ) # Perform code quality analysis analyze_code_quality( repo_url="https://gitlab.com/user/repo", language="python" # Optional, will auto-detect if not specified ) # Security scan security_scan_repository( repo_url="https://gitlab.com/user/repo", scan_type="trivy" ) # Compare changes compare_git_changes( repo_url="https://gitlab.com/user/repo", source="feature-branch", target="main" ) # Security scan repository security_scan_repository( repo_url="https://gitlab.com/user/repo", scan_type="trivy" ) ### MCP Configuration ```json { "command": "uvx", "args": [ "--from", "git+https://github.com/athapong/argus", "argus" ], "alwaysAllow": [ "get_commit_history", "enumerate_branches", "compare_git_changes", "analyze_code_quality", "security_scan_repository" ], "timeout": 300 } ``` ## Supported Analysis Tools | Language | Tools | Installation | |------------|-------------------------|------------------------------------------------| | Go | gocyclo, golangci-lint | `go install github.com/fzipp/gocyclo/cmd/gocyclo@latest` | | Java | PMD | macOS: `brew install pmd`, Linux: Auto-installed | | Python | Pylint, Bandit | Auto-installed via dependencies | | JavaScript | ESLint | `npm install -g eslint` | ## Environment Variables - `SKIP_SYSTEM_CHECK`: Set to any value to skip system dependency checks - `PATH`: Automatically updated for tool installations ## Error Handling The tool provides detailed error messages and graceful fallbacks: - Dependency installation failures show warnings instead of errors - Language detection falls back to specified language if auto-detection fails - Tool execution errors are captured in the response structure ## License MIT License ## Contributing 1. Fork the repository 2. Create your feature branch 3. Commit your changes 4. Push to the branch 5. Create a new Pull Request