No description
  • Python 87.6%
  • Shell 12.4%
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
2026-10-21 18:44:30 -07:00
.forgejo/workflows Bump to v1.1.0, add cron-sanity-checker/http-header-auditor/aws-waste-finder, working checkver; CI installs + tests every manifest on push and daily 2026-10-16 17:19:38 -07:00
bucket Install from the public GitHub repos: archive url/sha (GitHub refs/tags archives), README tap/bucket commands and source links; no links to our own git host (owner rule for everything errant.solutions sends users to). CI enforces it. 2026-10-21 18:44:30 -07:00
ci Install from the public GitHub repos: archive url/sha (GitHub refs/tags archives), README tap/bucket commands and source links; no links to our own git host (owner rule for everything errant.solutions sends users to). CI enforces it. 2026-10-21 18:44:30 -07:00
.gitignore Bump to v1.1.0, add cron-sanity-checker/http-header-auditor/aws-waste-finder, working checkver; CI installs + tests every manifest on push and daily 2026-10-16 17:19:38 -07:00
README.md Install from the public GitHub repos: archive url/sha (GitHub refs/tags archives), README tap/bucket commands and source links; no links to our own git host (owner rule for everything errant.solutions sends users to). CI enforces it. 2026-10-21 18:44:30 -07:00

scoop-errant-tools

Scoop bucket for free command-line tools from Errant Solutions.

Add this bucket

scoop bucket add errant-tools https://github.com/CanuteTheGreat/scoop-errant-tools

Tools

App Description
aws-waste-finder Read-only AWS cost drain scanner (EBS/EIP/NAT/snapshots/idle LBs)
cert-transparency-watcher Monitor Certificate Transparency logs for unexpected issuers/subdomains, free via crt.sh
cron-sanity-checker Catch impossible dates, typos and overlap in cron schedules, with next-run preview
dns-hygiene-checker Find dangling DNS records (subdomain takeover setups) before an attacker does, free via DoH
docker-baseline-auditor Read-only Docker security baseline checker (CIS-adjacent), free and zero-dependency
http-header-auditor Audit a live site's HTTP security headers, cookie flags and HTTPS redirect
json-schema-diff Classify JSON Schema changes as BREAKING, compatible, or info-only for API versioning
mail-security-auditor Audit a domain's SPF/DKIM/DMARC/MX email authentication hygiene, free and zero-dependency
nginx-config-auditor Static analyzer for nginx config files flagging common misconfigurations, free and zero-dependency
security-txt-auditor Audit robots.txt and security.txt (RFC 9116) for common misconfigurations
sshd-hardening-auditor Audit sshd_config against CIS/NIST SSH hardening recommendations
tls-cert-watchdog Check TLS certificate expiry/chain health for one or more hosts
webhook-sig-verifier Verify webhook HMAC signatures locally (GitHub/Stripe/Slack/generic), free and zero-dependency

Install

scoop install errant-tools/sshd-hardening-auditor
scoop install errant-tools/tls-cert-watchdog

All tools are pure-stdlib Python 3 scripts except aws-waste-finder, which also needs python -m pip install --user boto3. Requires Python 3 on PATH -- scoop install python or the official python.org installer with the .py file association enabled.

Source, issues, and the rest of our free tools: https://github.com/CanuteTheGreat

Tests

ci/test_manifests.py (run by CI on every push and daily) downloads every manifest's real archive, checks its hash, and runs each bin entry.