fendixapp/fendix repository overview

⁠Fendix

Fendix is an application security decision layer for engineering teams.

It combines DAST, SAST, SCA, and supported third-party security evidence, verifies scanner coverage, applies versioned release policy, and produces an explainable PASS, WARN, BLOCK, or INCOMPLETE decision.

⁠What Fendix provides

• Live API security testing
• Static source-code analysis
• Dependency vulnerability analysis
• SARIF import from supported third-party scanners
• Explicit analyzer coverage and coverage gaps
• Explainable policy and confidence decisions
• JSON, HTML, PDF, and SARIF reports
• CI/CD integration
• Multi-platform container images
• Signed releases, SBOMs, and build provenance

⁠Links

• Website: https://fendix.dev⁠
• Documentation: https://fendix.dev/docs⁠
• Source: https://github.com/Fendix-app/Fendix⁠
• Releases: https://github.com/Fendix-app/Fendix/releases⁠
• Security policy: https://github.com/Fendix-app/Fendix/security/policy⁠