[package]

name = "foxguard"

version = "0.8.1"

edition = "2021"

description = "A security scanner as fast as a linter, written in Rust. 170+ built-in rules across 11 languages."

license = "MIT OR Apache-2.0"

repository = "https://github.com/0sec-labs/foxguard"

homepage = "https://foxguard.dev"

keywords = ["security", "linter", "static-analysis", "sast", "vulnerability"]

categories = ["command-line-utilities", "development-tools"]

[dependencies]

clap = { version = "4", features = ["derive"] }

tree-sitter = "0.25"

tree-sitter-javascript = "0.23"

tree-sitter-typescript = "0.23"

tree-sitter-python = "0.23"

tree-sitter-go = "0.23"

tree-sitter-ruby = "0.23"

tree-sitter-java = "0.23"

tree-sitter-php = "0.24"

tree-sitter-rust = "0.24"

tree-sitter-c = "0.24"

tree-sitter-c-sharp = "0.23"

tree-sitter-swift = "0.7"

tree-sitter-kotlin-sg = "0.4"

tree-sitter-bash = "0.23"

serde = { version = "1", features = ["derive"] }

serde_json = "1"

colored = "2"

walkdir = "2"

rayon = "1"

ignore = "0.4"

regex = "1"

serde_yaml = "0.9"

sha2 = "0.10"

uuid = { version = "1", features = ["v5"] }

globset = "0.4"

tempfile = "3"

ratatui = "0.30"

crossterm = "0.28"

toml = "0.8"

shlex = "1"

unicode-segmentation = "1"

unicode-width = "0.2"

wait-timeout = "0.2.1"

# Optional deps for the GitHub App webhook receiver (gated behind the

# `github-app` feature). Off by default so the core scanner build stays

# lean. See src/github_app/README.md and issue #246.

axum = { version = "0.7", default-features = false, features = ["http1", "tokio", "json", "macros"], optional = true }

tokio = { version = "1", default-features = false, features = ["macros", "rt-multi-thread", "signal"], optional = true }

hmac = { version = "0.12", optional = true }

hex = { version = "0.4", optional = true }

tower-http = { version = "0.6", default-features = false, features = ["trace", "limit"], optional = true }

tracing = { version = "0.1", optional = true }

tracing-subscriber = { version = "0.3", default-features = false, features = ["fmt", "env-filter"], optional = true }

jsonwebtoken = { version = "10.4.0", optional = true }

reqwest = { version = "0.13.3", default-features = false, features = ["json", "rustls"], optional = true }

[features]

default = []

# Builds the foxguard-github-app binary plus its dependency closure.

github-app = ["dep:axum", "dep:tokio", "dep:hmac", "dep:hex", "dep:tower-http", "dep:tracing", "dep:tracing-subscriber", "dep:jsonwebtoken", "dep:reqwest"]

[[bin]]

name = "foxguard-mcp"

path = "src/bin/foxguard_mcp.rs"

[[bin]]

name = "foxguard-github-app"

path = "src/bin/foxguard_github_app.rs"

required-features = ["github-app"]

[dev-dependencies]