yandex/gixy

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

8566 stars · 451 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Gixy is a Python-based static analyzer for Nginx configuration files that detects security misconfigurations and flaws. It ships as a CLI tool that parses nginx.conf and reports issues like SSRF, HTTP splitting, and path traversal.

Use cases

• audit nginx config for security vulnerabilities
• detect path traversal in nginx alias directives
• find SSRF risks in nginx configuration
• lint nginx.conf before deployment
• check for HTTP response splitting in nginx
• validate referrer and origin validation rules in nginx

When to choose

• you run Nginx and want automated security review of its config
• you want to catch common nginx misconfigurations in CI before deploying
• you need a lightweight CLI linter for nginx.conf

When to avoid

• you use a web server other than Nginx
• you need runtime traffic analysis rather than static config checks
• you require support for the latest Nginx directives or active development - the project is in maintenance mode

Facets

cli-tool · maturity maintenance

security linter parser developer-tools security web-development developer-tools python cli nginx static-analysis configuration-audit security-misconfiguration vulnerability-detection devops linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="yandex/gixy")