Argus - Repository Analysis and Security Assessment Tool

Name: Argus - Repository Analysis and Security Assessment Tool
Author: athapong

@athapong

代码仓库

关于 Argus - Repository Analysis and Security Assessment Tool

A Model Context Protocol (MCP) server for analyzing GitLab repositories and performing security assessments.

#repository-analysis #security-assessment #code-quality

基本信息

分类

开发工具

许可证

MIT

运行时

python

传输方式

stdio

发布者

athapong

配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "argus": {
      "command": "uvx",
      "args": [
        "--from",
        "git+https://github.com/athapong/argus",
        "argus"
      ],
      "alwaysAllow": [
        "get_commit_history",
        "enumerate_branches",
        "compare_git_changes",
        "analyze_code_quality",
        "security_scan_repository"
      ],
      "timeout": 300
    }
  }
}

工具

未检测到工具

工具是从 README 中自动提取的。维护者可以在 ## Tools 标题下列出工具,即可填充这部分内容。

概览

What is Argus - Repository Analysis and Security Assessment Tool?

Argus is a Model Context Protocol (MCP) server that analyzes code repositories, performs security scans, and assesses code quality across multiple programming languages. It integrates with Git repositories and supports Go, Java, Python, and JavaScript/TypeScript.

How to use Argus - Repository Analysis and Security Assessment Tool?

Install via uvx argus or clone the repository. Configure the MCP client with the command uvx and arguments pointing to the GitHub source. Use MCP tools like analyze_repository_structure, analyze_code_quality, security_scan_repository, and compare_git_changes with a repository URL and optional credentials.

Key features of Argus - Repository Analysis and Security Assessment Tool

Multi-language support with automatic language detection
Security scanning using Trivy vulnerability scanner
Code quality analysis with language-specific linters
Git operations: branch enumeration, commit history, diff comparison
Repository structure visualization
Comprehensive error handling and graceful fallbacks

Use cases of Argus - Repository Analysis and Security Assessment Tool

Security auditing of open-source or internal repositories
Code quality checks before merging pull requests
Visualizing repository structure and commit history
Comparing changes between branches for code review
Automated integration into CI/CD pipelines via MCP

FAQ from Argus - Repository Analysis and Security Assessment Tool

What are the system dependencies?

Python 3.8+, Git, and libmagic (install via brew install libmagic on macOS or apt-get install libmagic1 on Linux).

How do I install Argus?

Use uvx argus or clone the repository and run it via MCP configuration. The SKIP_SYSTEM_CHECK environment variable bypasses dependency checks.

Which programming languages are supported?

Go, Java, Python, and JavaScript/TypeScript. Language is auto-detected or can be specified explicitly.

What analysis tools are integrated?

Go: gocyclo, golangci-lint
Java: PMD
Python: Pylint, Bandit
JavaScript/TypeScript: ESLint
General: Trivy for security scanning

How do I configure the MCP server?

Use the command uvx with arguments --from git+https://github.com/athapong/argus argus. Set alwaysAllow for tools like analyze_code_quality and security_scan_repository, and a timeout of 300 seconds.