GitHub Pages site for the Security Advisor project

Run scans, generate SARIF, and publish findings into Vulnerability Manager.

Security Advisor is an MCP server that coordinates SAST, SCA, IaC, container, and AI-powered Gemini code review checks, merges the output into a single SARIF report, and can publish normalized findings into the Vulnerability Manager app for tracking by organization, project, service, and version.

Get Started See Integration Details

8MCP tools for scans and publishing

SARIFUnified report output for security tooling

JWTProtected UI and API access

RolesBasic and admin user management

Explore the docs

Installation

Set up Python, install the dependencies, and configure the security tooling used by the scanner.

Open installation guide

Integration

Add the MCP server to your client, then connect it to the Vulnerability Manager publish flow.

Open integration guide

Workflow

See the scan → SARIF → publish sequence and the shape of the end-to-end data flow.

Open workflow guide