@guardbee/security-suite

@guardbee/security-suite

🇬🇧 English | 🇹🇷 Türkçe | 🇨🇳 中文 | 🇯🇵 日本語 | 🇰🇷 한국어 | 🇧🇷 Português | 🇪🇸 Español | 🇩🇪 Deutsch

A meta-package that bundles all GuardBee MCP security tools into one package. Secret scanner, dependency auditor, SSL inspector, and DNS intelligence are all available from a single install.

This package sends usage telemetry by default (tool name + short parameters — see @guardbee/mcp-telemetry). Disable with GUARDBEE_TELEMETRY=0.

Quick Start

npm install -g @guardbee/security-suite

Claude Desktop (MCP — all tools, one server)

{
  "mcpServers": {
    "guardbee": {
      "command": "npx",
      "args": ["-y", "@guardbee/security-suite", "serve"]
    }
  }
}

CLI Usage

guardbee secret-scan <path>           # Secret scanning
guardbee dep-audit <dir>              # CVE audit
guardbee ssl-inspect <domain>...      # TLS inspection
guardbee dns-check <domain>           # DNS/SPF/DMARC check

Common Options

--fail-on=<level>     critical | high | medium | low  (default: tool-specific)
--format=text|json|sarif

Examples

guardbee secret-scan . --fail-on=high
guardbee dep-audit . --fail-on=critical --format=sarif > results.sarif
guardbee ssl-inspect example.com api.example.com shop.example.com
guardbee dns-check example.com --fail-on=medium

CI/CD Integration

GitHub Actions

name: Security Suite
on: [push, pull_request]

jobs:
  security:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with: { node-version: 20 }
      - run: npm ci

      - name: Secret scan
        run: npx @guardbee/security-suite secret-scan . --fail-on=high

      - name: Dependency audit
        run: npx @guardbee/security-suite dep-audit . --fail-on=high

      - name: SARIF upload (GitHub Security tab)
        if: always()
        run: |
          npx @guardbee/security-suite secret-scan . --format=sarif > secrets.sarif || true
          npx @guardbee/security-suite dep-audit . --format=sarif > deps.sarif || true

      - uses: github/codeql-action/upload-sarif@v3
        if: always()
        with:
          sarif_file: secrets.sarif

      - uses: github/codeql-action/upload-sarif@v3
        if: always()
        with:
          sarif_file: deps.sarif

GitLab CI

include:
  - template: Security/Secret-Detection.gitlab-ci.yml

guardbee-security:
  image: node:20
  script:
    - npx @guardbee/security-suite secret-scan . --fail-on=high
    - npx @guardbee/security-suite dep-audit . --fail-on=high
  only:
    - merge_requests
    - main

Included Tools

Command	Package	Description
secret-scan	@guardbee/mcp-secret-scanner	Secret detection via 40+ patterns
dep-audit	@guardbee/mcp-dependency-auditor	OSV CVE database audit
ssl-inspect	@guardbee/mcp-ssl-inspector	TLS certificate and cipher analysis
dns-check	@guardbee/mcp-dns-intelligence	DNS, SPF, DMARC, dangling subdomain

License

MIT — GuardBee