TLDR Tech / InfoSec
argus
argus is a RAG-based vulnerability scanner for Go, Python, and Rust projects that runs entirely on local Ollama models (nomic-embed-text for embeddings, gpt-oss:20b for analysis) with a DuckDB vector store, parsing go.mod, requirements.txt, and Cargo.toml against OSV, GoVulnDB, RustSec, and PyPA feeds. Findings are version-aware and alias-deduplicated to suppress already-fixed advisories and avoid double-reporting GO-/CVE- pairs, with a .argusignore file, --min-severity and --fail-on gates, and SARIF output for the GitHub Security tab. Configurable via .argus.yaml, distributed as Go install, prebuilt release binaries with cosign signatures, and a Docker image.
Read the full story