ForgeGuard v0.2.0
Read-only security posture self-check for self-hosted Gitea/Forgejo. Own/authorized instances only.
Install:
python -m pip install forgeguard
Highlights (v0.2):
- Version / patch-currency posture (CVE-2026-27771)
- Container-registry anonymous-exposure posture (/v2/)
- Sign-in / anonymous-access posture
- Deterministic score with a before/after example (66/100 C -> 100/100 A after patching)
Read-only HTTP GET checks only - no exploit, no mass scanning, no artifact retrieval.