Tycho/tycho-security
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
Official Tycho Ops modular extension: tycho-security
1 commit 2 branches 0 tags 26 KiB
  • Shell 100%
Find a file
Exact
Olivier 3274eb556d feat(security): initial release of tycho-security audit suite
2026-10-01 15:30:30 +02:00
bin feat(security): initial release of tycho-security audit suite 2026-10-01 15:30:30 +02:00
package.json feat(security): initial release of tycho-security audit suite 2026-10-01 15:30:30 +02:00
README.md feat(security): initial release of tycho-security audit suite 2026-10-01 15:30:30 +02:00

README.md

Tycho Security (tycho-ops/tycho-security) 🛡️

Continuous Cyber-Resilience Suite: Code Audit & Deployment Audit
Extension modulaire pour la commande tycho sec (ou tycho security).

License: AGPL-3.0 ISO 27001 NIS 2 Debian Package

🚀 Deux Volets d'Audit Étanches

1. Audit de Code (tycho sec code)

tycho sec code secrets      # Détection de fuites de clés/tokens dans l'historique Git
tycho sec code sbom         # Extraction du SBOM CycloneDX (Node, Python, Go, OCI)
tycho sec code cve          # Corrélation des vulnérabilités CVE sur les dépendances
tycho sec code cra          # Vérification de conformité Cyber Resilience Act

2. Audit de Déploiements (tycho sec deploy)

tycho sec deploy easm <domain>   # Audit de surface externe : DNSSEC, SPF/DMARC, grade TLS, headers HTTP
tycho sec deploy k8s-cis         # Audit de durcissement K8s (readOnlyRootFilesystem, non-root, drop ALL)
tycho sec deploy passport        # Génération du Tycho Trust Passport (JSON/PDF signé Cosign)
tycho sec deploy nis2            # Évaluation des 10 mesures clés de l'Article 21 de NIS 2

3. Passerelle Zero-Trust LLM (tycho sec gateway)

tycho sec gateway           # Démarre la passerelle Zero-Trust et le vault de credentials

📦 Installation Debian / Ubuntu

sudo apt install tycho-security