Argus

🚀 Argus - Code Repository Analysis and Security Assessment Tool

A powerful Model Context Protocol (MCP) tool for analyzing code repositories, performing security scans, and evaluating the code quality of multiple programming languages.

🚀 Quick Start

Argus is a comprehensive tool that can analyze code repositories, conduct security scans, and evaluate code quality across multiple programming languages. It offers a range of features and supports various programming languages.

✨ Features

• Multi - language Support
  • Go: Analyzed by gocyclo and golangci - lint.
  • Java: Static analysis with PMD.
  • Python: Security checks using Pylint and Bandit.
  • JavaScript/TypeScript: Analyzed by ESLint.
  • Automatic language detection.
• Security Scanning
  • Integrated with Trivy vulnerability scanner.
  • Comprehensive security reports.
  • Support for multiple branches.
• Git Operations
  • Branch enumeration and management.
  • Commit history analysis.
  • Difference comparison.
  • Repository structure visualization.

📦 Installation

Dependencies

• Python 3.8+
• Git
• libmagic (system dependency)

System Dependencies

macOS

brew install libmagic

Linux (Ubuntu/Debian)

sudo apt-get update
sudo apt-get install -y libmagic1

Installation via uv

uvx argus

💻 Usage Examples

Basic Usage

# Analyze repository structure
analyze_repository_structure(
    repo_url="https://gitlab.com/user/repo",
    gitlab_credentials={"api_key": "your-token"},  # Optional
    branch="main"  # Optional
)

# Perform code quality analysis
analyze_code_quality(
    repo_url="https://gitlab.com/user/repo",
    language="python"  # Optional, auto-detected if not specified
)

# Security scan
security_scan_repository(
    repo_url="https://gitlab.com/user/repo",
    scan_type="trivy"
)

# Compare changes
compare_git_changes(
    repo_url="https://gitlab.com/user/repo",
    source="feature-branch",
    target="main"
)

# Security scan the repository
security_scan_repository(
    repo_url="https://gitlab.com/user/repo",
    scan_type="trivy"
)

Advanced Usage

{
    "command": "uvx",
    "args": [
        "--from",
        "git+https://github.com/athapong/argus",
        "argus"
    ],
    "alwaysAllow": [
        "get_commit_history",
        "enumerate_branches",
        "compare_git_changes",
        "analyze_code_quality",
        "security_scan_repository"  
    ],
    "timeout": 300
}

📚 Documentation

Supported Analysis Tools

Environment Variables

• SKIP_SYSTEM_CHECK: Set to any value to skip system dependency checks.
• PATH: Automatically update the tool installation path.

Error Handling

The tool provides detailed error messages and graceful fallback mechanisms:

• Display warnings instead of errors when dependency installation fails.
• Fall back to the specified language when automatic language detection fails.
• Capture tool execution errors in the response structure.

📄 License

This project is licensed under the MIT License.

🤝 Contribution Guidelines

1. Fork the repository.
2. Create a feature branch.
3. Commit your changes.
4. Push to the branch.
5. Create a new pull request.