Argus Panoptes

A hundred eyes on
every dependency.

In the myth, Argus Panoptes was the giant who never slept: a hundred watching eyes, some always open. The tool keeps the same watch over your builds. It matches every component against OSV, plans the safest fix, and opens the merge request for you, the same fix every time, without disturbing a line that didn’t need to change.

Download the binary Quick start

Ecosystem: Maven
Advisories: OSV.dev
Edits: Byte-level
Forge: GitLab

Watching the dependency graph

Beyond scanning

Most tools tell you what’s wrong.
Argus fixes it, and proves it.

A scanner ends at the finding and leaves the work, and the risk, with you. Argus carries each vulnerability all the way to a reviewed, tested merge request, with evidence your security posture actually improved.

A typical security scanner

Flags vulnerable dependencies and hands you a list.
Leaves the upgrade, the testing, and the pull request to you.
Re-reports the same findings on the next run.
No evidence the fix is safe, or that it even builds.

Argus

Argus resolves & proves

Opens the fix, not a ticket: plans the safest change and raises the merge request for you.
Proves it builds: qualifies every change against your own test suite before proposing it.
Proves your posture: attaches a PDF report of each finding and exactly how it was fixed.
Deterministic and surgical: a fixed strategy ladder and byte-level edits that touch only what must change.

One command

Download, then `argus run`.

No build toolchain, no compiling. Grab the prebuilt binary for your platform and point it at a Maven project. One run carries it from dependency graph to merge request.

The run command

terminal

# Download the prebuilt binary (no compiling)
VERSION=4.2.1
curl -fsSL -o argus \
  "https://argus-assets.typecheck.io/v${VERSION}/argus-${VERSION}-linux-amd64"
chmod +x argus && sudo mv argus /usr/local/bin/argus

# Download the prebuilt binary (no compiling)
VERSION=4.2.1
curl -fsSL -o argus \
  "https://argus-assets.typecheck.io/v${VERSION}/argus-${VERSION}-linux-amd64"
chmod +x argus && sudo mv argus /usr/local/bin/argus

terminal

# Plan, qualify, and publish fixes as merge requests
export GITLAB_PRIVATE_TOKEN=glpat-your-token-here

argus run \
  --pom pom.xml \
  --gitlab-url https://gitlab.example.com \
  --project-id 4567

# Plan, qualify, and publish fixes as merge requests
export GITLAB_PRIVATE_TOKEN=glpat-your-token-here

argus run \
  --pom pom.xml \
  --gitlab-url https://gitlab.example.com \
  --project-id 4567

Put a hundred eyes on your pipeline.

Wire Argus into GitLab CI and let remediation merge requests open themselves.

Set up CI/CD Release notes

A hundred eyes onevery dependency.

Most tools tell you what’s wrong. Argus fixes it, and proves it.