Horusec

horusec Plugin

Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command. Security vulnerability scanner.

Commands

Security Scanning

• horusec scan start — Start security vulnerability scan

Utility

• horusec _ _ — Passthrough to horusec CLI

Usage Examples

• "Scan for vulnerabilities"
• "Security analysis"
• "SAST scan"
• "Check security issues"

Installation

brew install horusec

Or via Go:

go install github.com/ZupIT/horusec/cmd/horusec@latest

Examples

# Scan project
horusec scan start ./myproject

# JSON output
horusec scan start ./myproject --json-output

# Skip folders
horusec scan start ./myproject --skip-folder node_modules

# Remote analysis
horusec scan start ./myproject --remote

# Any horusec command with passthrough
horusec _ _ start ./myproject
horusec _ _ start ./myproject --json-output

Key Features

• Multi-language - Go, Python, Java, Kotlin, Ruby, and more
• SAST - Static application security testing
• Fast - Quick vulnerability detection
• CI/CD - Pipeline integration
• Comprehensive - Multiple vulnerability types
• Remote - Cloud-based analysis
• Customizable - Configurable rules
• Reports - Detailed security reports
• Cross-platform - Linux, macOS, Windows
• Open source - Free and extensible

Notes

• Great for security scanning
• Supports many programming languages
• Perfect for CI/CD pipelines
• Identifies security flaws early