How to install gixy in CentOS/RHEL 9 (noarch)
Nginx configuration static analyzer
License: MPLv2.0
https://github.com/dvershinin/gixy
Install
sudo dnf -y install https://extras.getpagespeed.com/release-latest.rpm sudo dnf -y install gixy
Description
Gixy is a tool to analyze Nginx configuration. The main goal of Gixy is to prevent security misconfiguration and automate flaw detection.
RPMs
gixy-0.2.40-1.el9.noarch
[28 KiB]
Danila Vershinin (2026-03-19)
—
- Suppress warning for `ssl_prefer_server_ciphers on` with `PrioritizeChaCha` option. · - Improved compatibility with OpenSSL's `SSL_OP_PRIORITIZE_CHACHA`.
gixy-0.2.39-1.el9.noarch
[27 KiB]
Danila Vershinin (2026-03-18)
—
- Fixed detection of `quic_bpf` directive in main context. · - Improved compatibility with NGINX documentation standards.
gixy-0.2.36-1.el9.noarch
[27 KiB]
Danila Vershinin (2026-03-07)
—
- Added server mode for IDE integration. · - Introduced NDJSON over stdin/stdout for communication. · - Improved persistent process handling.
gixy-0.2.34-1.el9.noarch
[27 KiB]
Danila Vershinin (2026-02-13)
—
- Fixed malformed Docker command in README documentation. · - Updated outdated plugin paths to checks in documentation. · - Added missing status_page_exposed check in documentation. · - Changed CI/CD workflow trigger for PyPI publishing. · - Corrected double period typo in code docstring.
gixy-0.2.33-1.el9.noarch
[26 KiB]
Danila Vershinin (2026-02-09)
—
- Fixed false positive for `status_page_exposed` warning. · - Unix socket servers no longer trigger missing IP restrictions.
gixy-0.2.32-1.el9.noarch
[26 KiB]
Danila Vershinin (2026-02-07)
—
- Fix HSTS false positive when security_headers or more_set_headers provides HSTS. · - Invert ssl_prefer_server_ciphers check: flag on (LOW) instead of off.
gixy-0.2.31-1.el9.noarch
[26 KiB]
Danila Vershinin (2026-02-04)
—
- Added security check for publicly accessible NGINX stub_status directives. · - Detects configurations missing allow/deny directives. · - Improves security by preventing unauthorized access to server metrics.
gixy-0.2.30-1.el9.noarch
[25 KiB]
Danila Vershinin (2026-02-03)
—
- Fixed false positive in ReDoS detection for optional groups. · - Improved accuracy of nested quantifier vulnerability detection.
gixy-0.2.29-1.el9.noarch
[25 KiB]
Danila Vershinin (2026-01-28)
—
- Graceful handling of malformed nginx configs to prevent crashes. · - Improved error messaging for invalid directives. · - Added tests for better validation of config handling.
gixy-0.2.27-1.el9.noarch
[25 KiB]
Danila Vershinin (2026-01-28)
—
- Graceful handling of malformed nginx configs to prevent crashes. · - Improved error messaging for invalid directives. · - Added tests for better validation of config handling.
gixy-0.2.26-1.el9.noarch
[25 KiB]
Danila Vershinin (2026-01-27)
—
- Restored promotional footer in rich_console formatter. · - Footer links to getpagespeed.com/repo-subscribe.
gixy-0.2.25-1.el9.noarch
[25 KiB]
Danila Vershinin (2025-12-29)
—
- Fix compatibility issues with recent web server versions. · - Improve error handling for misconfigured rules. · - Enhance performance of rule evaluation process. · - Update dependencies for better security and stability. · - Add support for new configuration options. · - Refine documentation for clearer usage instructions.
gixy-0.2.24-1.el9.noarch
[25 KiB]
Danila Vershinin (2025-12-26)
—
- Added new plugin for HSTS header security checks. · - Updated weak_ssl_tls to be TLS-only, removing HSTS. · - HSTS checks now skip servers with ssl_reject_handshake on. · - Introduced plugin to warn on HTTP/2 misconfigurations. · - Improved compatibility with default_server settings. · - Enhanced security posture with new header checks.