Step Security Adds Linux Support to Dev Machine Guard
Summary
Step Security says Dev Machine Guard now runs natively on Linux, extending its developer-machine inventory and scanning to Linux fleets. The release supports local reporting and enterprise visibility, policy enforcement, and alerting.
Key points
- The Linux release supports AMD64 systems and is distributed as .deb and .rpm packages; the vendor says artifacts are signed with Sigstore and include build provenance attestations.
- The scanner inventories AI coding agents and CLI tools, IDE extensions, MCP server configurations, npm packages, system packages, and local frameworks, processes, and shell tooling.
- Linux discovery uses native mechanisms including application paths, package-manager queries, and a systemd user timer; the vendor says no root daemon or system-wide service is required.
- Community mode runs locally and produces JSON or HTML reports without sending data elsewhere; Enterprise mode sends scan results to the Step Security backend.
- Enterprise features include centralized device views, policy enforcement, alerts for compromised dependencies and malicious extensions, and historical reporting for incident triage.
- The vendor says Linux support is intended to help teams identify which developer machines have affected packages or extensions during supply-chain incidents.
Article Details
- Event Type
- Security product release: Dev Machine Guard added native Linux support.
- Impact
- The release extends Dev Machine Guard’s developer-machine inventory and scanning to Linux on AMD64, alongside its existing macOS and Windows support. It is intended to give security teams visibility into installed packages, IDE extensions, AI tools, and other developer-machine components across their fleets, supporting investigation and policy enforcement during supply-chain incidents.