🚀 Optimizing CI/CD Security

Software Composition Analysis (SCA) at light speed.

Kevlar-CheckDeps audits your Python project dependencies with zero extra overhead. Pure Python, zero external dependencies, deep vulnerability auditing engineered specifically for AppSec and DevSecOps engineers.

View Repository

$ git clone https://github.com/brunoevn/kevlar-checkdeps.git

bash - kevlar-checkdeps

user@devsecops ~/my-python-app

$ python kevlar.py --path . --vuls

[INFO] Automatically detected technology: pip
[INFO] Reading requirements.txt...
[INFO] Checking 50 packages against PyPI registry...
[INFO] Auditing 50 packages against OSV vulnerability DB...

[SUCCESS] Checked: 50 packages in 2.36s. Vulnerabilities: 0.

Status: CLEAN

Engineered for technical efficiency.

Power up your security audits with ultra-lightweight tools and zero infrastructure overhead.

Zero External Dependencies

Written in pure Python. Requires no third-party libraries that could introduce new attack vectors.

Multi-Ecosystem Support

Audits dependencies across major language ecosystems: Python, Node.js, .NET, Java, Go, Rust, PHP & Ruby.

Python Node.js .NET Java Go Rust PHP Ruby

Real Benchmark Metrics

Empirically measured performance: ~21ms per audited package (50+ dependencies checked against OSV DB in ~2.36s).

Multi-Format Exports

Generate comprehensive reports in HTML, JSON, SARIF (GitHub Security Alerts), and Markdown (.md).

HTML JSON SARIF MD

OSV Vulnerability Audit

Deep vulnerability auditing powered by the Google OSV (Open Source Vulnerabilities) CVE database.

CI/CD Native

Ready for native integration into GitHub Actions with our official Marketplace action to block vulnerable PRs.

GitHub Actions Workflow

Automate your security with GitHub Actions

Kevlar-CheckDeps is now available directly on GitHub Marketplace. Easily integrate vulnerability scanning into your CI/CD pipelines with our official GitHub Action.

✓ Sub-second execution per pipeline
✓ Developer-friendly output for CI/CD logs
✓ Automated blocking of vulnerable PRs

View on GitHub Marketplace

.github/workflows/security.yml

name: Security Scan
on: [push, pull_request]

jobs:
  security-scan:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Kevlar CheckDeps Scan
        uses: brunoevn/kevlar-checkdeps-action@v1
        with:
          path: '.'

Ready to secure your codebase?

Join development, report issues, or contribute to the project on GitHub.

Contribute on GitHub