automation

devguard: Attestation‑Based Supply‑Chain Security for Startups

Name: devguard: Attestation‑Based Supply‑Chain Security for Startups
Author: l3montree-dev

Use devguard to turn compliance into code, auto‑manage CVEs, and sync vulnerability scanners—ideal for founders building secure, compliant products.

From the repo · “DevGuard Backend - Secure your Software Supply Chain - Attestation-based compliance as Code, manage your CVEs seamlessly, Integrate your Vulnerability Scanners, Security Framework Documentation made easy - OWASP Incubating Project”

181 stars+15★ this week47 forksGoGuide quality 9/10 · reviewed Oct 15Updated 10/21/2026100% free · open source

What it does

DevGuard automates attestation-based security and CVE management for your startup, integrating vulnerability scanners and streamlining security framework documentation as code.

When to use it

•When you need to ensure compliance with attestation-based security standards
•When managing CVEs manually becomes cumbersome and error-prone
•When integrating multiple vulnerability scanners into your security workflow

Ready-to-paste prompt

Run `go run main.go -config=/path/to/your/config.yaml` to start DevGuard with a custom configuration file, defining your specific security framework and scanner settings.

Heads up: Ensure you have Go installed on your system and properly configured, as DevGuard is written in Go and requires a compatible environment to build and run.

Saves to your device

Use with Claude

New

Skip the builder — one click puts this in Claude, Cursor, Antigravity and more.

✅ Light setup

Installs with a command or two; your AI agent can do it for you.

Try it instantly — no install

Claude Code

mkdir -p ~/.claude/skills/devguard && curl -fsSL https://workflowstacks.com/api/skills/devguard/claude-skill -o ~/.claude/skills/devguard/SKILL.md

Open in another AI app

Opens the app with this repo with the prompt ready to go — no copy-paste needed.

Connect the whole catalog (MCP)

claude mcp add --transport http workflowstacks https://workflowstacks.com/api/mcp

Adds a WorkflowStacks connector to Claude Code: search and load any skill here by chatting.

What's inside — free to inspect

No purchase needed

Read the entire source before you build — unlike paid marketplaces that hide it behind a buy button.

top-level files

folders

174.0M

source size

Other

license

Key files

README.md

File tree

.github/

.kratos/

.vscode/

accesscontrol/

cmd/

compliance/

config/

controllers/

crowdsourcevexing/

database/

docs/

dtos/

events/

fixedversion/

grafana/

integrations/

licenses/

middlewares/

mocks/

monitoring/

nix/

normalize/

pkg/

router/

Use with Claude

New

Skip the builder — one click puts this in Claude, Cursor, Antigravity and more.

✅ Light setup

Installs with a command or two; your AI agent can do it for you.

Try it instantly — no install

Claude Code

mkdir -p ~/.claude/skills/devguard && curl -fsSL https://workflowstacks.com/api/skills/devguard/claude-skill -o ~/.claude/skills/devguard/SKILL.md

Open in another AI app

Opens the app with this repo with the prompt ready to go — no copy-paste needed.

Connect the whole catalog (MCP)

claude mcp add --transport http workflowstacks https://workflowstacks.com/api/mcp

Adds a WorkflowStacks connector to Claude Code: search and load any skill here by chatting.

Quick Actions

Details

Creator

l3montree-dev

Language

Do this with a working workflow

Pages we wrote and tested that put a skill like this to work — importable n8n templates, outcome guides and Claude Desktop configs.

Outcome guide

Triage your inbox automatically

The workflow watches your inbox and classifies each new email by priority with a one-line reason and a draft reply, logging everything to a ranked sheet. You open your day to a triaged list, not a pile.