DSO - DevSecOps Oracle

Appearance

DSODevSecOps Oracle

Your senior DevSecOps engineer in your terminal

Get Started
View on GitHub
DSO

100% Local

No data is sent outside. Everything works locally with Ollama for AI.

Local AI

Intelligent analysis of results with Ollama. No internet connection needed for analysis.

Zero Configuration

Automatic detection of languages, frameworks and tools. Works immediately.

Auto-Fix

Automatic correction of safe issues with interactive confirmation.

Interactive UI

Beautiful TUI with navigation, filtering, and real-time search for exploring scan results.

Continuous Monitoring

Watch mode to monitor your repo and detect new issues.

CI/CD Integration

Automatic generation of GitHub Actions and GitLab CI workflows.

Web Interface

Modern web UI with Vue.js for comprehensive project analysis and AI chat.

Comprehensive Toolset

20+ DevSecOps tools integrated: SAST, Secrets, Dependencies, IaC, Containers, SBOM, Compliance.

About the Developer ​

DSO is a project created by Ismail MOUYAHADA, Platform and DevSecOps Engineer.

With expertise in security automation, cloud infrastructure, and cross-platform development, Ismail MOUYAHADA created DSO to bring enterprise-grade security analysis to developers' terminals with zero configuration and complete privacy.

Copyright © 2024 Ismail MOUYAHADA. All rights reserved.

This project was created and developed by Ismail MOUYAHADA, Platform and DevSecOps Engineer.

Quick Installation ​

macOS / Linux:

bash
curl -fsSL https://raw.githubusercontent.com/dso-cli/dso-cli/main/install | bash

Or if you've cloned the repository:

bash
git clone https://github.com/dso-cli/dso-cli.git
cd dso-cli
chmod +x install
./install

Windows (PowerShell):

powershell
git clone https://github.com/dso-cli/dso-cli.git
cd dso-cli
.\install.ps1

Windows (Batch):

cmd
git clone https://github.com/dso-cli/dso-cli.git
cd dso-cli
install.bat

The installation script automatically:

  • Checks/Installs Go (if missing)
  • Builds DSO binary
  • Checks/Installs Ollama
  • Downloads AI model qwen2.5:7b by default (if no models exist)
  • Optionally installs security tools (Trivy, gitleaks, etc.)

Web Interface ​

DSO includes a modern web interface for comprehensive project analysis:

bash
# Start the web UI
cd web
npm install
npm run dev:full

Access the interface at http://localhost:3000 with:

  • Dashboard: Overview of all scans and findings
  • Real-time Scanning: Live progress with console logs and timeline
  • AI Chat: Interactive chat with your security model
  • Results View: Multiple views (All, By Category, By Tool)
  • Repository Integration: Connect to GitHub or GitLab
  • Configuration Panel: Monitor all DevSecOps tools status

Manual Installation ​

bash
# Clone and build
git clone https://github.com/dso-cli/dso-cli.git
cd dso-cli
go build -o dso .        # Linux/macOS
go build -o dso.exe .   # Windows

# Install Ollama and model
# macOS: brew install ollama
# Linux: curl -fsSL https://ollama.ai/install.sh | sh
# Windows: Download from ollama.ai
ollama pull qwen2.5:7b  # Default model

# Run your first audit
./dso audit .           # Linux/macOS
.\dso.exe audit .       # Windows

Example Output ​

DSO - DevSecOps Oracle

Summary
────────────────────────────────────────────────────────────
  You have 127 alerts but only 3 are critical and exploitable in prod.

Statistics
────────────────────────────────────────────────────────────
  Total: 127 findings
  Critical: 3
  High: 12
  Medium: 45
  Low: 67

Top Priority Fixes
────────────────────────────────────────────────────────────

1. Hardcoded AWS key in frontend/.env.production
   frontend/.env.production:12
   
   sed -i '12d' frontend/.env.production && git commit -am "fix: remove hardcoded AWS key"

Project created by Platform and DevSecOps Engineer Ismail MOUYAHADA

Copyright © 2024-2026 Ismail MOUYAHADA. All rights reserved. MIT License.