GESF

GESF — Green Engineering Standard Framework

GESF (pronounced"Gessf") — the framework that helps you"get safe."

Compliance-as-Code framework that automatically enforces GDPR, OWASP, NIST, and CIS engineering standards in any software project — regardless of programming language.

- Scansyour source code for security vulnerabilities and compliance violations using 6 built-in scanners (language-agnostic pattern matching)
- Detectsyour project's ecosystem automatically — Node.js, Python, Rust, Go, Ruby, Java, PHP,.NET — and runs the correct dependency auditor
- Generatescompliance documentation — GDPR, data inventory, retention policies, risk assessments
- Scoresyour project against multiple compliance frameworks with severity-weighted grading
- CreatesCI/CD pipelines (5 GitHub Actions workflows including SBOM scanning) that fail the build on critical issues
- Providesan AI compliance assistant via MCP for Claude, VS Code Copilot, Cursor, and more

- It does not replace legal counsel for GDPR compliance.
- It does not automatically fix your code — it identifies issues and suggests fixes.
- It does not require a running server or database.

brew tap greenarmor/gesf brew install ges cd your-project ges init ges audit

npm install -g @greenarmor/ges cd your-project ges init ges audit

pnpm add -g @greenarmor/ges cd your-project ges init ges audit

cd your-project npx @greenarmor/ges init npx @greenarmor/ges audit

GESF scansanyproject — Python, Rust, Go, Java, Ruby, PHP,.NET, and more. Homebrew installs Node.js automatically; npm/pnpm/npx require Node.js >= 22.

packages/ ├── cli/ # CLI (@greenarmor/ges) ├── core/ # Types, schemas, constants ├── audit-engine/ # Real source code scanning (6 scanners) ├── compliance-engine/ # GDPR Article 5/25/30/32/33/34 controls ├── policy-engine/ # 7 policy packs (56+ total controls) ├── rules-engine/ # Auth, encryption, secrets, logging standards ├── doc-generator/ # 14 compliance/security document templates ├── cicd-generator/ # 5 GitHub Actions workflow generation ├── scoring-engine/ # Multi-framework severity-weighted scoring ├── scanner-integration/ # External tool integration (Trivy, Gitleaks, Semgrep, SBOM) ├── report-generator/ # Markdown/HTML report generation └── mcp-server/ # MCP AI compliance assistant (6 tools)

GESF automatically detects your project's language and package manager from lockfiles:

Language-agnostic scanners (Trivy, Gitleaks, Semgrep, Syft, Grype) run regardless of ecosystem.

This is a web browser that enables your coding agent, such as Claude Code, to visit websites on your behalf and assist you in identifying bugs or creating UI test cases.

Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning with Cycode.

Performs a Trivy scan to produce a Software Bill of Materials (SBOM) in CycloneDX format.

Enable AI agents to secure code with Semgrep.

An engineering governance and safety control plane for AI coding agents to enforce strict SDLC discipline, quality gates, and security branch protections.

EU AI Act compliance scanner for Python AI agents — 10 tools for scanning, analysis, and remediation

AI-powered security scanning. Scans code, files, and git diffs for vulnerabilities in real-time using the Armis scanning API.

MCP server that vets LLM-emitted shell commands BEFORE execution. 30 detection rules across destructive file ops, package managers, system, database, git, network, exfiltration, privilege escalation. Sub-second, local, free.

Give your coding agent the dependency graph it is about to change: scan a source tree, SBOM, Git ref, or container image; explain why a package is present; diff two graphs; check findings against policy.

BoostSecurity MCP acts as a safeguard preventing agents from adding vulnerable packages into projects. It analyzes every package an AI agent introduces, flags unsafe dependencies, and recommends secure, maintained alternatives to keep projects protected.

A secure MCP server for executing controlled command-line operations with comprehensive security features.