Dazio catches malicious dependencies at install, finds exposed secrets before malware does, and hardens your dev toolchain.

Free.

📖 Documentation: boostsecurityio.github.io/dazio

🐛 Bugs and questions: open an issue

Install

Homebrew, on macOS or Linux:

brew install boostsecurityio/tap/dazio

Without Homebrew, on macOS or Linux:

/bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/boostsecurityio/dazio/HEAD/install.sh)"

Install covers upgrades, mise and the script's options. Then run your first scan:

dazio scan

Learn more

• Quick start: the first scan and continuous protection
• What it checks: malware, secrets, toolchain hardening and coverage by ecosystem
• CLI and configuration reference
• How it works & privacy
• Uninstall
• FAQ

Support

Bugs and questions go to this repository's Issues. The source is closed; this repository hosts the releases.

Looking for more? Boost's Developer Endpoint Protection adds central management, reporting and support on top of everything Dazio does.