jroimartin / lava

Lava is an open source vulnerability scanner that makes it easy to run security checks in your local and CI/CD environments.

Lava

Lava is an open source vulnerability scanner that makes it easy to run security checks in your local and CI/CD environments.

Lava is part of the Vulcan ecosystem and it is built on top of the same components that power Vulcan. Thus, Lava continuously benefits from Vulcan improvements. In fact, Lava is compatible with the vulcan-checks catalog shipped with Vulcan.

Install

Binary Distributions

Official binary distributions are available at https://github.com/adevinta/lava/releases.

Install From Source

Install the Lava command with go install.

go install github.com/adevinta/lava/cmd/lava@latest

GitHub Actions

Lava is also available as an action that can be used from GitHub Actions workflows. Visit adevinta/lava-action for usage instructions.

Documentation

Lava is self-documented. Please run lava help to get more information about the available commands and other related topics.

Contributing

This project is in an early stage, we are not accepting external contributions yet.

To contribute, please read the contribution guidelines.