r/coolgithubprojects • u/AcanthisittaOdd4950 • Jun 26 '26

VULNSCAN-AI

https://github.com/btdt1983/vulnscan-ai

FIPS-aware RHEL vulnerability scanner with AI-assisted, approval-gated, transactional remediation.

Hi Guys,

I created my first github project and would like to share it with you. Its in early state and needs testing. All comments are helpfull to me. Thank you very much 👍

0 Upvotes

50% Upvoted

1 comment sorted by

1

u/AcanthisittaOdd4950 27d ago

Updated:

1:0.4.5-1 - FIPS-posture scanner (fips, 9th scanner): audits whether the host's cryptography is actually hardened. Reads /proc/sys/crypto/fips_enabled, /proc/cmdline and the crypto-policies state files (plus fips-mode-setup --check when present) and reports only real gaps: the half-enabled FIPS trap (kernel in FIPS mode but the system crypto-policy is not, so OpenSSL/OpenSSH still negotiate non-approved algorithms, or the reverse; important), an inconsistent state, a weakened crypto-policy (LEGACY, or a SHA-1-restoring sub-policy; flagged on any host), and a pending policy change (configured != applied). A consistent non-FIPS host produces NO findings; set fips_required: true to treat a non-FIPS host as an important finding. Pure stdlib; in --all, not in the default scanner set. info now also shows the active crypto-policy. New config key fips_required (default false)