Metadata-Version: 2.4
Name: armorone
Version: 0.2.0
Summary: ArmorOne: Next-Gen Autonomous SAST, DevSecOps & Agentic Code Security Platform
Author-email: ArmorOne Security Team <security@armorone.io>
Classifier: Development Status :: 4 - Beta
Classifier: Intended Audience :: Developers
Classifier: Intended Audience :: Information Technology
Classifier: License :: OSI Approved :: Apache Software License
Classifier: Programming Language :: Python :: 3
Classifier: Programming Language :: Python :: 3.11
Classifier: Programming Language :: Python :: 3.12
Classifier: Programming Language :: Python :: 3.13
Classifier: Programming Language :: Python :: 3.14
Classifier: Topic :: Security
Classifier: Topic :: Software Development :: Quality Assurance
Requires-Python: >=3.11
Description-Content-Type: text/markdown
License-File: LICENSE
Requires-Dist: fastapi>=0.110.0
Requires-Dist: uvicorn[standard]>=0.28.0
Requires-Dist: pydantic[email]>=2.6.0
Requires-Dist: pydantic-settings>=2.2.0
Requires-Dist: sqlmodel==0.0.46
Requires-Dist: sqlalchemy>=2.0.28
Requires-Dist: alembic>=1.13.1
Requires-Dist: asyncpg>=0.29.0
Requires-Dist: psycopg2-binary>=2.9.9
Requires-Dist: typer>=0.12.0
Requires-Dist: rich>=13.7.1
Requires-Dist: textual>=0.53.0
Requires-Dist: python-dotenv>=1.0.1
Requires-Dist: pyyaml>=6.0.1
Requires-Dist: jsonschema>=4.21.1
Requires-Dist: httpx>=0.27.0
Requires-Dist: truststore>=0.9.0; python_version >= "3.10"
Requires-Dist: mcp>=1.0.0; python_version < "3.14"
Requires-Dist: celery>=5.3.6
Requires-Dist: redis>=5.0.3
Requires-Dist: fakeredis>=2.21.0
Requires-Dist: bcrypt>=4.1.0
Requires-Dist: pyjwt>=2.8.0
Requires-Dist: semgrep>=1.65.0
Requires-Dist: bandit>=1.7.8
Provides-Extra: dev
Requires-Dist: pytest>=8.1.0; extra == "dev"
Requires-Dist: pytest-asyncio>=0.23.5; extra == "dev"
Requires-Dist: pytest-cov>=4.1.0; extra == "dev"
Requires-Dist: aiosqlite>=0.20.0; extra == "dev"
Requires-Dist: ruff>=0.3.2; extra == "dev"
Requires-Dist: mypy>=1.9.0; extra == "dev"
Requires-Dist: types-pyyaml>=6.0.12; extra == "dev"
Requires-Dist: types-jsonschema>=4.21.0; extra == "dev"
Dynamic: license-file

# ArmorOne SAST 🛡️

**ArmorOne** is an ultra-fast, multi-engine Static Application Security Testing (SAST), DevSecOps governance, and Agentic AI security platform built for the modern software development lifecycle.

[![PyPI Version](https://img.shields.io/pypi/v/armorone.svg)](https://pypi.org/project/armorone/)
[![Python Versions](https://img.shields.io/pypi/pyversions/armorone.svg)](https://pypi.org/project/armorone/)
[![License: Apache 2.0](https://img.shields.io/badge/License-Apache_2.0-blue.svg)](https://opensource.org/licenses/Apache-2.0)
[![Documentation: CI-Verified](https://img.shields.io/badge/docs-CI--verified-brightgreen.svg)](docs/)

---

## ⚡ Quick Installation

### Option 1: Modern Isolated Python CLI (`uv tool` / `pipx` - Recommended)
```bash
# Using uv (fast & isolated):
uv tool install armorone

# Or using pipx:
pipx install armorone
```

### Option 2: Standard pip
```bash
pip install armorone
```

Then provision the two Go engines the CLI shells out to:

```bash
armorone setup
```

---

## 🚀 Instant Usage

```bash
# Run multi-engine security scan across current repository (Semgrep, Gitleaks, Bandit, Trivy)
armorone scan .

# Sub-10s differential scan (scans only modified lines in git diff)
armorone scan . --diff

# Interactively review and apply auto-remediation patches
armorone fix <finding_fingerprint> --dry-run

# Launch interactive full-screen terminal triage dashboard
armorone triage

# Start FastMCP server for AI coding assistants (Antigravity, Cursor, Claude Code, Gemini)
armorone mcp run
```

---

## 🌟 Core Architecture & Key Features

- **Multi-Engine Ingestion**: Aggregates Semgrep, Gitleaks, Bandit, and Trivy into a unified, deduplicated `ArmorOneFinding` schema.
- **⚡ Dual-Mode Remediation**:
  - **Mode B (Deterministic Polyglot CST)**: <5ms, $0 token cost, 0% hallucination concrete syntax tree patch generator across **Python, TypeScript/JavaScript, Go, Java, and C/C++**.
  - **Mode A (Code Graph Program Slicing + LLM)**: Backward taint slicing and context-isolated prompt synthesis for complex architectural refactors.
- **🤖 Native FastMCP Integration**: Connects seamlessly to Google Antigravity, Cursor, Claude Code, Gemini CLI, and Windsurf via JSON-RPC stdio.
- **🔒 Sovereign Air-Gapped Mode (Model D)**: 100% offline rootless container distribution with zero telemetry and zero external network egress.

---

## 📚 Documentation & Guides

Every command shown in any of these is checked in CI against the shipped CLI —
`scripts/verify_docs_sync.py` fails the build on a wrong flag, a broken
repository path, or a command that no longer exists. Start with
**[the FAQ](docs/user_faq.md)** if you're not sure where to start; it's the
most general page and links out into everything below. If something isn't
behaving the way a doc says it should, **[the Troubleshooting
Guide](docs/troubleshooting.md)** is organized by symptom rather than by
module — most failures look the same whether you hit them from the CLI, the
IDE extension, or MCP. Otherwise, pick your role:

**👨‍💻 Developer** — writing code, running scans locally, using the IDE or an AI agent
- [Developer Quickstart](docs/developer_quickstart.md) — install, first scan, CLI reference, IDE and MCP setup
- [Contributor & Core Architecture Guide](docs/contributor_architecture.md) — scanner drivers, AST/CST rewriters, Code Graph Program Slicing
- [Agentic SDLC & AI Code Observability](docs/agentic_sdlc_observability.md) — governing code an AI agent wrote, not just code a human wrote

**🚀 DevOps / Platform Engineer** — wiring ArmorOne into a pipeline or a fleet
- [DevOps & CI/CD Pipeline Guide](docs/devops_cicd_guide.md) — GitHub, GitLab, Azure, Bitbucket integrations; `--fail-on`, `--require-report`
- [Deployment Modes: Verification Matrix](docs/deployment_modes.md) — what actually passed, per deployment mode, with the command that proves it
- [Enterprise Infrastructure & Fleet Deployment](docs/deployment_blueprints.md) — Kubernetes Helm, Rootless Podman, fleet rollout
- [Air-Gapped Sovereign Deployment Manual](docs/airgapped_zero_llm_mode.md) — 100% offline, zero-egress mode

**🔒 AppSec / Security Lead** — triage, policy, and proving the tool works
- [AppSec & Security Lead User Guide](docs/appsec_user_guide.md) — triage workflows, policy inheritance, suppression, audit logging
- [Accuracy Benchmark & Methodology](docs/competitive_benchmarking_hub.md) — exactly what's been measured, on what corpus, with the reproduction command

**📊 Evaluator / Decision Maker** — deciding whether to adopt ArmorOne
- [Executive Pitch Deck & Business Case](docs/executive_pitch_deck.md)
- [Sales Battlecards & Objection Handling](docs/sales_battlecards.md)
- [Accuracy Benchmark & Methodology](docs/competitive_benchmarking_hub.md) — the evidence behind the pitch

Also: [`CHANGELOG.md`](CHANGELOG.md) records what changed release to release,
including the two changes most likely to alter when your build goes red.

---

## 📜 License
Apache License 2.0. See [LICENSE](LICENSE) for details.
