@guardbee/security-suite
🇬🇧 English | 🇹🇷 Türkçe
A meta-package that bundles all GuardBee MCP security tools into one package. Secret scanner, dependency auditor, SSL inspector, and DNS intelligence are all available from a single install.
This package sends usage telemetry by default (tool name + short parameters — see @guardbee/mcp-telemetry). Disable with GUARDBEE_TELEMETRY=0.
Quick Start
npm install -g @guardbee/security-suite
{
"mcpServers": {
"guardbee": {
"command": "npx",
"args": ["-y", "@guardbee/security-suite", "serve"]
}
}
}
CLI Usage
guardbee secret-scan <path>
guardbee dep-audit <dir>
guardbee ssl-inspect <domain>...
guardbee dns-check <domain>
Common Options
--fail-on=<level> critical | high | medium | low (default: tool-specific)
--format=text|json|sarif
Examples
guardbee secret-scan . --fail-on=high
guardbee dep-audit . --fail-on=critical --format=sarif > results.sarif
guardbee ssl-inspect example.com api.example.com shop.example.com
guardbee dns-check example.com --fail-on=medium
CI/CD Integration
GitHub Actions
name: Security Suite
on: [push, pull_request]
jobs:
security:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: actions/setup-node@v4
with: { node-version: 20 }
- run: npm ci
- name: Secret scan
run: npx @guardbee/security-suite secret-scan . --fail-on=high
- name: Dependency audit
run: npx @guardbee/security-suite dep-audit . --fail-on=high
- name: SARIF upload (GitHub Security tab)
if: always()
run: |
npx @guardbee/security-suite secret-scan . --format=sarif > secrets.sarif || true
npx @guardbee/security-suite dep-audit . --format=sarif > deps.sarif || true
- uses: github/codeql-action/upload-sarif@v3
if: always()
with:
sarif_file: secrets.sarif
- uses: github/codeql-action/upload-sarif@v3
if: always()
with:
sarif_file: deps.sarif
GitLab CI
include:
- template: Security/Secret-Detection.gitlab-ci.yml
guardbee-security:
image: node:20
script:
- npx @guardbee/security-suite secret-scan . --fail-on=high
- npx @guardbee/security-suite dep-audit . --fail-on=high
only:
- merge_requests
- main
| Command | Package | Description |
|---|
secret-scan | @guardbee/mcp-secret-scanner | Secret detection via 40+ patterns |
dep-audit | @guardbee/mcp-dependency-auditor | OSV CVE database audit |
ssl-inspect | @guardbee/mcp-ssl-inspector | TLS certificate and cipher analysis |
dns-check | @guardbee/mcp-dns-intelligence | DNS, SPF, DMARC, dangling subdomain |
License
MIT — GuardBee