No description
- Python 87.6%
- Shell 12.4%
| Filename | Latest commit message | Latest commit date |
|---|---|---|
|
|
||
| .forgejo/workflows | ||
| bucket | ||
| ci | ||
| .gitignore | ||
| README.md | ||
scoop-errant-tools
Scoop bucket for free command-line tools from Errant Solutions.
Add this bucket
scoop bucket add errant-tools https://github.com/CanuteTheGreat/scoop-errant-tools
Tools
| App | Description |
|---|---|
| aws-waste-finder | Read-only AWS cost drain scanner (EBS/EIP/NAT/snapshots/idle LBs) |
| cert-transparency-watcher | Monitor Certificate Transparency logs for unexpected issuers/subdomains, free via crt.sh |
| cron-sanity-checker | Catch impossible dates, typos and overlap in cron schedules, with next-run preview |
| dns-hygiene-checker | Find dangling DNS records (subdomain takeover setups) before an attacker does, free via DoH |
| docker-baseline-auditor | Read-only Docker security baseline checker (CIS-adjacent), free and zero-dependency |
| http-header-auditor | Audit a live site's HTTP security headers, cookie flags and HTTPS redirect |
| json-schema-diff | Classify JSON Schema changes as BREAKING, compatible, or info-only for API versioning |
| mail-security-auditor | Audit a domain's SPF/DKIM/DMARC/MX email authentication hygiene, free and zero-dependency |
| nginx-config-auditor | Static analyzer for nginx config files flagging common misconfigurations, free and zero-dependency |
| security-txt-auditor | Audit robots.txt and security.txt (RFC 9116) for common misconfigurations |
| sshd-hardening-auditor | Audit sshd_config against CIS/NIST SSH hardening recommendations |
| tls-cert-watchdog | Check TLS certificate expiry/chain health for one or more hosts |
| webhook-sig-verifier | Verify webhook HMAC signatures locally (GitHub/Stripe/Slack/generic), free and zero-dependency |
Install
scoop install errant-tools/sshd-hardening-auditor
scoop install errant-tools/tls-cert-watchdog
All tools are pure-stdlib Python 3 scripts except aws-waste-finder, which also needs
python -m pip install --user boto3. Requires Python 3 on PATH -- scoop install python or the official python.org installer with the .py file association enabled.
Source, issues, and the rest of our free tools: https://github.com/CanuteTheGreat
Tests
ci/test_manifests.py (run by CI on every push and daily) downloads every manifest's
real archive, checks its hash, and runs each bin entry.