bearer/curio repository overview

⁠This package is deprecated; the project has been renamed to Bearer⁠

⁠What is Curio?

Curio is an open source static code analysis tool (SAST) that scans your source code to discover security risks and vulnerabilities that put your sensitive data at risk (PHI, PD, PII).

You can learn more about Curio:

• By viewing the source on GitHub⁠.
• Getting started with the documentation⁠.
• Opening an issue⁠ or joining our discord community⁠.
• Learn more about Bearer⁠, the team behind Curio.

⁠Use Curio to scan a project for data security risks

To use the docker image to scan a local project for data security risks and vulnerabilities, run the command below. Replace /path/to/repo with the path to your project.

docker run --rm -v /path/to/repo:/tmp/scan bearer/curio:latest-amd64 scan /tmp/scan

⁠License

Curio code is licensed under the terms of the Elastic License 2.0 (ELv2)⁠, which means you can use it freely inside your organization to protect your applications without any commercial requirements. You are not allowed to provide Curio to third parties as a hosted or managed service without the explicit approval of Bearer Inc.