🛡️
Security Advisor
Installation
Installation

Set up the scanner and manager locally.

Security Advisor targets Python environments managed with uv and expects the external security tooling used for SAST, SCA, IaC, and container scans to be installed on your path.

Base setup

1
Clone the repository

Open the project in your workspace.

2
Create a virtual environment

Run uv venv and activate it.

3
Install dependencies

Use uv pip install -e . to install the project in editable mode.

4
Set the bootstrap password

Define SECURITY_ADVISOR_BOOTSTRAP_ADMIN_PASSWORD before starting the app.

Required tools

  • Python 3.14 or newer
  • uv for dependency and runtime management
  • Semgrep for SAST scanning
  • Trivy for SCA and IaC scanning
  • DockerScan for container image scanning
python3 --version
uv --version
semgrep --version
trivy --version
dockerscan --version