Subscribe

How to install gixy in CentOS/RHEL 9 (noarch)

Nginx configuration static analyzer

Install

sudo dnf -y install https://extras.getpagespeed.com/release-latest.rpm
sudo dnf -y install gixy

Description

Gixy is a tool to analyze Nginx configuration. The main goal of Gixy is to prevent security misconfiguration and automate flaw detection.

RPMs

Danila Vershinin (2026-03-19) - Suppress warning for `ssl_prefer_server_ciphers on` with `PrioritizeChaCha` option. · - Improved compatibility with OpenSSL's `SSL_OP_PRIORITIZE_CHACHA`.
Danila Vershinin (2026-03-18) - Fixed detection of `quic_bpf` directive in main context. · - Improved compatibility with NGINX documentation standards.
Danila Vershinin (2026-03-07) - Added server mode for IDE integration. · - Introduced NDJSON over stdin/stdout for communication. · - Improved persistent process handling.
Danila Vershinin (2026-02-13) - Fixed malformed Docker command in README documentation. · - Updated outdated plugin paths to checks in documentation. · - Added missing status_page_exposed check in documentation. · - Changed CI/CD workflow trigger for PyPI publishing. · - Corrected double period typo in code docstring.
Danila Vershinin (2026-02-09) - Fixed false positive for `status_page_exposed` warning. · - Unix socket servers no longer trigger missing IP restrictions.
Danila Vershinin (2026-02-07) - Fix HSTS false positive when security_headers or more_set_headers provides HSTS. · - Invert ssl_prefer_server_ciphers check: flag on (LOW) instead of off.
Danila Vershinin (2026-02-04) - Added security check for publicly accessible NGINX stub_status directives. · - Detects configurations missing allow/deny directives. · - Improves security by preventing unauthorized access to server metrics.
Danila Vershinin (2026-02-03) - Fixed false positive in ReDoS detection for optional groups. · - Improved accuracy of nested quantifier vulnerability detection.
Danila Vershinin (2026-01-28) - Graceful handling of malformed nginx configs to prevent crashes. · - Improved error messaging for invalid directives. · - Added tests for better validation of config handling.
Danila Vershinin (2026-01-28) - Graceful handling of malformed nginx configs to prevent crashes. · - Improved error messaging for invalid directives. · - Added tests for better validation of config handling.
Danila Vershinin (2026-01-27) - Restored promotional footer in rich_console formatter. · - Footer links to getpagespeed.com/repo-subscribe.
Danila Vershinin (2025-12-29) - Fix compatibility issues with recent web server versions. · - Improve error handling for misconfigured rules. · - Enhance performance of rule evaluation process. · - Update dependencies for better security and stability. · - Add support for new configuration options. · - Refine documentation for clearer usage instructions.
Danila Vershinin (2025-12-26) - Added new plugin for HSTS header security checks. · - Updated weak_ssl_tls to be TLS-only, removing HSTS. · - HSTS checks now skip servers with ssl_reject_handshake on. · - Introduced plugin to warn on HTTP/2 misconfigurations. · - Improved compatibility with default_server settings. · - Enhanced security posture with new header checks.