{"id":50476867,"url":"https://github.com/foomo/obacht","last_synced_at":"2026-06-01T14:00:40.520Z","repository":{"id":354348187,"uuid":"1223230822","full_name":"foomo/obacht","owner":"foomo","description":"Security configuration scanner for developer environments","archived":false,"fork":false,"pushed_at":"2026-05-19T06:54:56.000Z","size":2085,"stargazers_count":1,"open_issues_count":0,"forks_count":0,"subscribers_count":0,"default_branch":"main","last_synced_at":"2026-05-19T08:53:39.611Z","etag":null,"topics":["foomo","foomo-obacht","security","security-tools"],"latest_commit_sha":null,"homepage":"https://foomo.github.io/obacht/","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/foomo.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"docs/CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"docs/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"docs/SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2026-04-28T06:03:54.000Z","updated_at":"2026-05-19T06:55:00.000Z","dependencies_parsed_at":null,"dependency_job_id":null,"html_url":"https://github.com/foomo/obacht","commit_stats":null,"previous_names":["foomo/obacht"],"tags_count":10,"template":false,"template_full_name":null,"purl":"pkg:github/foomo/obacht","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/foomo%2Fobacht","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/foomo%2Fobacht/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/foomo%2Fobacht/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/foomo%2Fobacht/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/foomo","download_url":"https://codeload.github.com/foomo/obacht/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/foomo%2Fobacht/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":33777971,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-06-01T02:00:06.963Z","response_time":115,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["foomo","foomo-obacht","security","security-tools"],"created_at":"2026-06-01T14:00:24.229Z","updated_at":"2026-06-01T14:00:40.485Z","avatar_url":"https://github.com/foomo.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"[![Go Report Card](https://goreportcard.com/badge/github.com/foomo/obacht?style=flat-square)](https://goreportcard.com/report/github.com/foomo/obacht)\n[![GoDoc](https://img.shields.io/badge/GoDoc-✓-informational.svg?style=flat-square\u0026logo=go)](https://godoc.org/github.com/foomo/obacht)\n[![Coverage](https://img.shields.io/codecov/c/github/foomo/obacht?style=flat-square\u0026logo=github)](https://app.codecov.io/gh/foomo/obacht)\n[![GitHub Downloads](https://img.shields.io/github/downloads/foomo/obacht/total.svg?style=flat-square\u0026logo=github)](https://github.com/foomo/obacht/releases)\n[![Docker Pulls](https://img.shields.io/docker/pulls/foomo/obacht.svg?style=flat-square\u0026logo=docker)](https://hub.docker.com/r/foomo/obacht)\n[![GitHub Stars](https://img.shields.io/github/stars/foomo/obacht.svg?style=flat-square\u0026logo=github)](https://github.com/foomo/obacht)\n\n\u003cp align=\"center\"\u003e\n  \u003cimg alt=\"obacht\" src=\"docs/public/logo.png\" width=\"400\" height=\"400\"/\u003e\n\u003c/p\u003e\n\n\u003e Security scanner for developer environments\n\nobacht inspects your local development setup for security misconfigurations — insecure file permissions, exposed credentials, weak SSH/Git settings, risky Docker access — using an embedded [OPA](https://www.openpolicyagent.org/) engine and Rego policies. It is lightweight, read-only, and requires no agent or endpoint management platform.\n\n## Demo\n\n\u003cp align=\"center\"\u003e\n  \u003cimg alt=\"obacht demo\" src=\"docs/public/demo.gif\" width=\"800\"/\u003e\n\u003c/p\u003e\n\n## Features\n\n- **118 built-in rules** across 13 categories: SSH, Git, Docker, Kubernetes, env, shell, tools, PATH, OS, credentials, privacy, Claude Code, bumblebee\n- **OPA-powered** with an embedded Rego engine — no external dependencies\n- **Read-only collectors** — never modifies system state\n- **Extensible** via `--rules-dir` for custom Rego policies\n- **Pretty TUI** or machine-readable JSON output for CI\n\n## Installation\n\n\u003cdetails\u003e\n\u003csummary\u003e\u003cb\u003eHomebrew\u003c/b\u003e (macOS / Linux)\u003c/summary\u003e\n\n```shell\nbrew install foomo/tap/obacht\n```\n\nSee the [foomo/homebrew-tap](https://github.com/foomo/homebrew-tap) repository.\n\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003e\u003cb\u003eDocker\u003c/b\u003e\u003c/summary\u003e\n\n```shell\ndocker run --rm foomo/obacht:latest scan\n```\n\nMulti-arch images (`amd64`, `arm64`) are published to [Docker Hub](https://hub.docker.com/r/foomo/obacht).\n\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003e\u003cb\u003emise\u003c/b\u003e\u003c/summary\u003e\n\n```shell\nmise use github:foomo/obacht\n```\n\nor run directly:\n\n```shell\nmise x github:foomo/obacht -- scan\n```\n\nSee [mise.jdx.dev](https://mise.jdx.dev).\n\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003e\u003cb\u003eBinary release\u003c/b\u003e\u003c/summary\u003e\n\nDownload the archive for your OS/arch from the [releases page](https://github.com/foomo/obacht/releases) and extract `obacht` into your `$PATH`.\n\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003e\u003cb\u003ego install\u003c/b\u003e\u003c/summary\u003e\n\n```shell\ngo install github.com/foomo/obacht/cmd/obacht@latest\n```\n\nRequires Go 1.26+.\n\n\u003c/details\u003e\n\n## Usage\n\n```shell\n$ obacht --help\nSecurity configuration scanner for developer environments\n\nUsage:\n  obacht [flags]\n  obacht [command]\n\nAvailable Commands:\n  completion  Generate the autocompletion script for the specified shell\n  doctor      Check obacht dependencies and configuration\n  explain     Show detailed information about a rule\n  help        Help about any command\n  scan        Scan the local development environment for security issues\n\nFlags:\n      --format string      output format (pretty, json) (default \"pretty\")\n  -h, --help               help for obacht\n      --rules-dir string   use rules from this directory instead of embedded rules\n      --verbose            enable verbose output\n  -v, --version            version for obacht\n\nUse \"obacht [command] --help\" for more information about a command.\n```\n\n## Resources\n\n- [Foomo Security](https://www.foomo.org/blog/tag/security/)\n- [Pareto Security](https://github.com/ParetoSecurity/pareto-mac)\n\n## How to Contribute\n\nContributions are welcome! Please read the [contributing guide](CONTRIBUTING.md).\n\n![Contributors](https://contributors-table.vercel.app/image?repo=foomo/obacht\u0026width=50\u0026columns=15)\n\n## License\n\nDistributed under MIT License, please see license file within the code for more details.\n\n_Made with ♥ [foomo](https://www.foomo.org) by [bestbytes](https://www.bestbytes.com)_\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ffoomo%2Fobacht","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Ffoomo%2Fobacht","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ffoomo%2Fobacht/lists"}