unspecified

gixy (noarch) - Nginx configuration static analyzer

Website: https://github.com/dvershinin/gixy
License: MPLv2.0
Description:
Gixy is a tool to analyze Nginx configuration. The main goal of Gixy
is to prevent security misconfiguration and automate flaw detection.

How to Install gixy (noarch)

sudo yum -y install https://extras.getpagespeed.com/release-latest.rpm
sudo yum -y install gixy

Packages

gixy-0.2.24-1.amzn2023.noarch [20 KiB] Changelog by Danila Vershinin (2025-12-26):
- Added new plugin for HSTS header security checks.
- Updated weak_ssl_tls to be TLS-only, removing HSTS.
- HSTS checks now skip servers with ssl_reject_handshake on.
- Introduced plugin to warn on HTTP/2 misconfigurations.
- Improved compatibility with default_server settings.
- Enhanced security posture with new header checks.
gixy-0.2.23-1.amzn2023.noarch [19 KiB] Changelog by Danila Vershinin (2025-12-19):
- Added weak_ssl_tls plugin to detect insecure SSL/TLS configurations.
- Introduced auto-fix mode with new CLI options.
- New option to preview fixes without modifying files.
- Updated README with categorized plugin documentation.
- Ensured compatibility with Python 3.6 in test suite.
gixy-0.2.22-1.amzn2023.noarch [18 KiB] Changelog by Danila Vershinin (2025-12-17):
- Added Checkstyle XML output format for CI/CD integration.
- Integrated Bandit for local security scanning in pre-commit.
- Custom hook for hardcoded IP checks added.
- Path filters now skip tests for documentation changes.
- NOSONAR/nosec comments added to reduce false positives.
gixy-0.2.21-1.amzn2023.noarch [18 KiB] Changelog by Danila Vershinin (2025-12-12):
- Fix security vulnerability in configuration parsing.
- Improve compatibility with newer versions of Nginx.
- Enhance error handling for invalid configurations.
- Update documentation for clearer usage instructions.
- Refactor code for better maintainability.
- Optimize performance for large configuration files.
gixy-0.2.14-1.amzn2023.noarch [17 KiB] Changelog by Danila Vershinin (2025-12-07):
- Rewrote `regex_redos` plugin for improved ReDoS detection with no external dependencies.
- Added support for nginx 1.29.3 with updated `add_header_redefinition` behavior.
- `if` blocks now correctly expose regex capture groups as variables.
- Expanded documentation with new guides and examples for plugins.
- Added extensive integration tests for WordPress configurations.
- Improved code quality with legacy cleanup and better comments.
gixy-0.2.12-1.amzn2023.noarch [17 KiB] Changelog by Danila Vershinin (2025-10-26):
- upstream release v0.2.12
gixy-0.2.11-1.amzn2023.noarch [16 KiB] Changelog by Danila Vershinin (2025-10-20):
- upstream release v0.2.11
gixy-0.2.9-1.amzn2023.noarch [16 KiB] Changelog by Danila Vershinin (2025-10-05):
- upstream release v0.2.9
gixy-0.2.8-1.amzn2023.noarch [16 KiB] Changelog by Danila Vershinin (2025-10-05):
- upstream release v0.2.8
gixy-0.2.7-1.amzn2023.noarch [16 KiB] Changelog by Danila Vershinin (2025-03-03):
- upstream release v0.2.7
gixy-0.2.6-1.amzn2023.noarch [15 KiB] Changelog by Danila Vershinin (2025-02-23):
- upstream release v0.2.6

Subscribe