What is DSO?
DSO (DevSecOps Oracle) is a DevSecOps CLI assistant powered by local AI that talks to you like a senior security engineer sitting next to you.
Developed by: Ismail MOUYAHADA - DevSecOps Engineer & Multi-Platform Software Developer
Why DSO?
The Problem
Existing security tools are often:
- Too verbose (thousands of false positives)
- Not contextual (don't understand your project)
- Require complex configuration
- Send your data outside
The Solution
DSO solves these problems by being:
- Intelligent: Local AI analyzes and filters results
- Contextual: Understands your project and gives you the 3-5 issues that really matter
- Local: 100% local, zero code leakage
- Simple: One command, zero configuration
How It Works
dso audit .And DSO does EVERYTHING automatically:
- Full scan: SAST, secrets, dependencies, IaC
- AI analysis: Ollama analyzes results locally
- Smart summary: Gives you the 3-5 critical issues
- Fixes: Proposes exact commands to run
Key Features
🧠 Local AI
Uses Ollama with models like qwen2.5:7b (default), llama3.1:8b, phi3, or mistral:7b to analyze results. Everything works locally, no data is sent outside.
🔍 Comprehensive DevSecOps Toolset
DSO integrates 20+ security tools across all categories:
SAST (6 tools): Trivy, Semgrep, Bandit, ESLint, Gosec, Brakeman
Dependencies (5 tools): Grype, npm audit, pip-audit, Snyk, OWASP Dependency-Check
Secrets (3 tools): Gitleaks, TruffleHog, detect-secrets
IaC (4 tools): TFSec, Checkov, Terrascan, Kics
Containers (2 tools): Hadolint, Docker Bench Security
SBOM (1 tool): Syft
Compliance (1 tool): OPA
All tools are automatically detected and used when available. See Scanners Guide for details.
Smart Auto-Fix
Automatically fixes safe issues:
- Removes exposed secrets
- Updates vulnerable dependencies
- Fixes configurations
👀 Continuous Monitoring
watch mode to continuously monitor your repo and detect new issues.
Use Cases
Individual Developer
# Quick audit before commit
dso audit .
# Automatic fix
dso fix --auto .Team
# CI/CD integration
dso ci --provider github .
# Continuous monitoring
dso watch --interval 10m .Enterprise
# Policy generation
dso policy --type opa .
# SBOM for compliance
dso sbom --format cyclonedx .Next Steps
- Installation: Install DSO in 3 steps
- Getting Started: Run your first audit
- Commands: Discover all available commands