Open source

Contribution flow & strategy

Fork, branch, test, and open a PR — every contribution follows the same path from idea to merge.

Where to contribute

New scanner

Grype, CodeQL, SonarQube wrapper

New language client

Rust, Ruby gem, .NET NuGet

Bug fix

Parsing, severity mapping, crashes

Documentation

Setup guides, examples, API docs

Tests

Edge cases, new tool fixtures

Core code

MCP tools, CLI, normalisation

Pull request flow

1

Fork & clone

Fork the repo on GitHub and clone your fork locally.

2

Create a branch

Use a descriptive name: feat/add-grype-scanner or fix/sca-parsing.

3

Develop & test

Make changes, run pytest / npm test / go test in the affected package.

4

Open a pull request

Push to your fork and open a PR against main. Fill out the PR template.

5

Code review

A maintainer reviews within a few days. Address feedback if needed.

6

Merge

Once approved and CI passes, your contribution ships under MIT.

Commit convention

<type>(<scope>): <short description>

Types: feat · fix · docs · test · chore · refactor · perf

feat(sast): add Grype SCA scanner
fix(sca): handle Safety v3 JSON format
docs(api): document scan_iac framework param

Adding a new scanner

  1. Add runner in packages/python/src/argus/tools/<category>.py
  2. Register in server.py — tool list, handler, registry
  3. Add tests in packages/python/tests/
  4. Update docs/tool-setup.md and README

Development setup

Python core

git clone https://github.com/argus-code-scanning/argus-codescan-mcp.git
cd argus-codescan-mcp/packages/python
python3 -m venv .venv && source .venv/bin/activate
pip install -e ".[dev]"
pytest && ruff check src tests

npm package

cd packages/npm
npm install && npm run build && npm test
Full contributing guideOpen an issue
Open source

GitHub repository metrics

Live stats from argus-code-scanning/argus-codescan-mcp. MIT licensed, built in the open.

argus-codescan-mcpMIT · Updated 9/2/2026
View repo
8Stars
1Forks
29Open issues
8Watchers
CIPython CICInpm CICIGo CIlicenseMIT