Haseeb Farooq

What an agent can do with the Argus-appsec corpus

Argus-CodeSecurity/Argus-appsec: Nephilex is an open-source AI Security Engineer that analyzes repositories, detects vulnerabilities, validates risks, explains findings…

• Look up how Argus-appsec implements devsecops, llm-security, python, with answers cited to file and line.
• Reuse a worked example: the commit “run every git call through one hardened runner” (6 files · Python).
• Answer from Argus-appsec's real Python source instead of memory (Security and vulnerabilities).

• Where does Argus-appsec handle “run every git call through one hardened runner”?
• How does Argus-appsec implement devsecops?
• What does src/argus do in Argus-appsec?

Search the GitHub repository Argus-CodeSecurity/Argus-appsec with XERJ (https://hub.xerj.org/corpus/nephilex--nephilex).
Run these in a shell, in order, and check each result before the next:
1. xerj --help  (success: it prints usage). If xerj is missing: curl -fsSL https://xerj.org/get | sh
2. git clone https://github.com/Argus-CodeSecurity/Argus-appsec Argus-appsec && git -C Argus-appsec checkout 96b374a463757eb9e0ef19ef88d45582237b98b5
3. Start a local node and leave it running: xerj --insecure --data-dir ./xerj-data
4. xerj autoindex ./Argus-appsec --url http://127.0.0.1:9200 --prefix argus-appsec --progress plain
5. xerj autoindex map --url http://127.0.0.1:9200
Then answer my question from the indexed files and cite the ax_path of every hit. Query syntax: https://xerj.org/llms.txt
Licence: Apache-2.0. Keep the copyright notice and credit the authors.

corpus nephilex--nephilex · Security and vulnerabilities
Related corpora: bandit-plugins, gosec-rules, Actenon/actenon-scan, bastyn-labs/bastyn-scan
Code security audit with XERJ · Case study: reference coding for agents