unspecified

python3-gixy (noarch) - NGINX configuration static analyzer library

Website: https://github.com/dvershinin/gixy
License: MPLv2.0
Description:
Gixy is a tool to analyze Nginx configuration. The main goal of Gixy
is to prevent security misconfiguration and automate flaw detection.

How to Install python3-gixy (noarch)

sudo yum -y install https://extras.getpagespeed.com/release-latest.rpm
sudo amazon-linux-extras install epel
sudo yum -y install python3-gixy

Packages

python3-gixy-0.2.36-1.amzn2.noarch [202 KiB] Changelog by Danila Vershinin (2026-03-07):
- Added server mode for IDE integration.
- Introduced NDJSON over stdin/stdout for communication.
- Improved persistent process handling.
python3-gixy-0.2.34-1.amzn2.noarch [199 KiB] Changelog by Danila Vershinin (2026-02-13):
- Fixed malformed Docker command in README documentation.
- Updated outdated plugin paths to checks in documentation.
- Added missing status_page_exposed check in documentation.
- Changed CI/CD workflow trigger for PyPI publishing.
- Corrected double period typo in code docstring.
python3-gixy-0.2.33-1.amzn2.noarch [199 KiB] Changelog by Danila Vershinin (2026-02-09):
- Fixed false positive for `status_page_exposed` warning.
- Unix socket servers no longer trigger missing IP restrictions.
python3-gixy-0.2.32-1.amzn2.noarch [198 KiB] Changelog by Danila Vershinin (2026-02-07):
- Fix HSTS false positive when security_headers or more_set_headers provides HSTS.
- Invert ssl_prefer_server_ciphers check: flag on (LOW) instead of off.
python3-gixy-0.2.31-1.amzn2.noarch [198 KiB] Changelog by Danila Vershinin (2026-02-04):
- Added security check for publicly accessible NGINX stub_status directives.
- Detects configurations missing allow/deny directives.
- Improves security by preventing unauthorized access to server metrics.
python3-gixy-0.2.30-1.amzn2.noarch [196 KiB] Changelog by Danila Vershinin (2026-02-03):
- Fixed false positive in ReDoS detection for optional groups.
- Improved accuracy of nested quantifier vulnerability detection.
python3-gixy-0.2.29-1.amzn2.noarch [196 KiB] Changelog by Danila Vershinin (2026-01-28):
- Graceful handling of malformed nginx configs to prevent crashes.
- Improved error messaging for invalid directives.
- Added tests for better validation of config handling.
python3-gixy-0.2.27-1.amzn2.noarch [196 KiB] Changelog by Danila Vershinin (2026-01-28):
- Graceful handling of malformed nginx configs to prevent crashes.
- Improved error messaging for invalid directives.
- Added tests for better validation of config handling.
python3-gixy-0.2.26-1.amzn2.noarch [196 KiB] Changelog by Danila Vershinin (2026-01-27):
- Restored promotional footer in rich_console formatter.
- Footer links to getpagespeed.com/repo-subscribe.
python3-gixy-0.2.25-1.amzn2.noarch [195 KiB] Changelog by Danila Vershinin (2025-12-29):
- Fix compatibility issues with recent web server versions.
- Improve error handling for misconfigured rules.
- Enhance performance of rule evaluation process.
- Update dependencies for better security and stability.
- Add support for new configuration options.
- Refine documentation for clearer usage instructions.
python3-gixy-0.2.24-1.amzn2.noarch [195 KiB] Changelog by Danila Vershinin (2025-12-26):
- Added new plugin for HSTS header security checks.
- Updated weak_ssl_tls to be TLS-only, removing HSTS.
- HSTS checks now skip servers with ssl_reject_handshake on.
- Introduced plugin to warn on HTTP/2 misconfigurations.
- Improved compatibility with default_server settings.
- Enhanced security posture with new header checks.

Subscribe