Expand description
§Forge Guard
Pre-deployment smart contract auditing framework for Foundry.
Transforms security auditing from an optional step into a mandatory pre-deployment process, providing developers with comprehensive offline smart contract auditing capabilities.
Modules§
- ai
- AI-powered auditing — integrates OpenAI, Anthropic Claude, and Ollama for intelligent vulnerability analysis of Solidity smart contracts.
- benchmark
- Benchmark runner — measures performance of audit components.
- chains
- Multi-chain support — chain-specific analyzers and configuration.
- ci
- CI/CD integration — generates pipeline configurations for various platforms.
- cli
- CLI argument parsing and command dispatch.
- core
- dependencies
- Dependency analysis — scans for known vulnerabilities in dependencies.
- deployment
- Deployment guard — blocks unsafe deployments by default.
- doctor
- Doctor module — analyzes project health and configuration.
- exploit
- Exploit engine — generates attack vectors and exploit paths.
- fuzzing
- Fuzzing adapter — provides integration points for fuzzing campaigns.
- gas
- Gas analysis — analyzes gas usage patterns and suggests optimizations.
- importer
- External analyzer import —
forge-guard import. - notify
- Webhook notifications —
forge-guard notify. - parser
- Solidity source file parser — parses source code into structured representations for deeper vulnerability analysis (CEI, access control, etc.).
- plugins
- Plugin architecture — extensible plugin system for forge-guard.
- reports
- Report engine — generates JSON, Markdown, and executive summary audit reports.
- sbom
- SBOM Generation
- security
- Security engine — comprehensive vulnerability detection framework.
- suppressions
- Suppression file support.
- templates
- Template library — pre-built audit profiles for common contract types.
- utils
- Shared utilities — caching, formatting, and helper functions.
Functions§
- run_cli
- Run the forge-guard CLI with the given command-line arguments. Primary entry point for the binary.