Assembly Line

foxguard

A fast universal code security scanner, written in Rust. Batteries included: supports 14 languages, TUI for triage, secrets, post-quantum audits, diff-aware scans and more π“ƒ₯

foxguard is an open-source linters and formatters project on GitHub under the MIT license (permissive), with 308 stars. It is built with Rust, CPython, Axum and Tokio. Its last push was 2 days ago.

Stars
308
License
MIT
Activity
Active
Latest release
v0.14.1

Code on GitHub Website

Judgement

What it is
Developer tool
What it does
A command-line security scanner written in Rust with over 200 built-in rules, taint tracking, secrets detection, dependency checks against OSV and post-quantum crypto audits. It can load most Semgrep and OpenGrep rules and outputs SARIF and CycloneDX.
Adopt it when
You want a fast local or CI static-analysis scan across several languages and already have Semgrep-style rules you want to reuse.
Watch out
It is eight months old, still on 0.x, and its rule coverage and false-positive rate are unproven against long-established scanners.
Ready for
Usable
Runs as
Command line
Built with
Rust, tree-sitter and Python
How established
Young: started 7 months ago, latest release v0.14.1.
What the license allows
You can build it into a product you sell, as long as you keep its copyright notice.

Judged on 2026-11-06 from the project's README and GitHub data. The license and age lines are worked out directly.

Built from

Follow it down: foxguard β†’ Rust β†’ runs on a microchip

How compilers were built, back to punched paper tape

Open-source alternatives to foxguard

  1. 1
    Prettier prettier

    Prettier is an opinionated code formatter.

    Developer tool Production-ready A web team wants to stop arguing about formatting and use the formatter that nearly every editor and framework already supports.

    β˜… 52k MIT JavaScript Active, pushed today
  2. 2
    Ruff astral-sh

    An extremely fast Python linter and code formatter, written in Rust.

    Developer tool Production-ready You want to replace Flake8, isort and Black in a Python project with one tool that runs in a fraction of the time.

    β˜… 50k MIT Rust Active, pushed today
  3. 3
    Black psf

    The uncompromising Python code formatter

    Developer tool Production-ready A Python team wants formatting settled automatically and is not already using Ruff's compatible formatter.

    β˜… 42k MIT Python Active, pushed yesterday
  4. 4
    ShellCheck koalaman

    ShellCheck, a static analysis tool for shell scripts

    Developer tool Production-ready Your repositories contain shell scripts, especially in CI or deployment, and you want common mistakes caught before they run.

    β˜… 40k GPL-3.0 Haskell Active, pushed today
  5. 5
    ESLint eslint

    Find and fix problems in your JavaScript code.

    Developer tool Production-ready You need the JavaScript linter with the largest rule and plugin ecosystem, including framework-specific rules for React, Vue and others.

    β˜… 28k MIT JavaScript Active, pushed today
  6. 6
    Biome biomejs

    A toolchain for web projects, aimed to provide functionalities to maintain them. Biome offers formatter and linter, usable via CLI and LSP.

    Developer tool Production-ready You want to replace ESLint plus Prettier in a web project with a single fast tool and can live with its built-in rule set.

    β˜… 26k Apache-2.0 Rust Active, pushed today
  7. 7
    Oxc oxc-project

    βš“ A collection of high-performance JavaScript tools.

    Developer tool Usable Linting is slow on a large JavaScript codebase and you want Oxlint alongside or instead of ESLint, or you build tooling that needs a fast parser.

    β˜… 23k MIT Rust Active, pushed today
  8. 8
    mypy python

    Optional static typing for Python

    Developer tool Production-ready A growing Python codebase uses type hints and you want the reference checker that most typing features land in first.

    β˜… 21k See repository Python Active, pushed today

Stars, license and activity come from GitHub and refresh on a rolling hourly schedule. The project's own description is quoted as written.