kaplanelad / shellfirm

What it does

• 496 built-in checks across 23 groups (filesystem, git, Kubernetes, Terraform, Docker, AWS, GCP, Azure, Heroku, Fly.io, Vercel, Netlify, GitHub, npm, databases, Redis, MongoDB, network, remote-script execution such as curl … | bash (shell),
• Shell hooks for 8 shells. Bash, Zsh, Fish, Elvish and Xonsh are tested end to end; Nushell is tested with a limitation (see Shell support); the PowerShell and Oils hooks are shipped but not yet tested end to end. shellfirm status shows whi
• Context-aware escalation. harder challenges when connected via SSH, running as root, on protected git branches, or in production Kubernetes clusters
• Safer alternatives. many checks suggest a safer command (e.g. --force-with-lease)
• Severity levels with configurable thresholds (Critical, High, Medium, Low, Info)