Repository navigation
v0.1.7
lucidscan - Plugin-Based Security Scanning Framework
The "LangChain for DevSecOps" - a framework that orchestrates security scanners through a unified plugin architecture.
Installation
pip install lucidscanOn first run, scanner plugins automatically download their binaries for your platform.
Docker Image (Recommended for CI)
docker pull ghcr.io/voldeq/lucidscan:0.1.7The Docker image includes pre-downloaded scanner binaries and a pre-warmed Trivy vulnerability database for instant scanning.
Default Scanner Plugin Versions
| Scanner Plugin | Version |
|---|---|
| Trivy | 0.68.1 |
| OpenGrep | 1.12.1 |
| Checkov | 3.2.495 |
Quick Start
# Scan current directory
lucidscan --all
# In CI with Docker
docker run --rm -v $(pwd):/workspace ghcr.io/voldeq/lucidscan:latest --allFull Changelog: v0.1.6...v0.1.7