@guardbee/security-suite 0.2.0 → 0.2.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +21 -19
- package/TR.md +133 -0
- package/package.json +8 -7
package/README.md
CHANGED
|
@@ -1,21 +1,23 @@
|
|
|
1
1
|
# @guardbee/security-suite
|
|
2
2
|
|
|
3
|
+
**🇬🇧 English** | [🇹🇷 Türkçe](TR.md)
|
|
4
|
+
|
|
3
5
|
[](https://www.npmjs.com/package/@guardbee/security-suite)
|
|
4
6
|
[](LICENSE)
|
|
5
7
|
|
|
6
|
-
|
|
8
|
+
A meta-package that bundles all GuardBee MCP security tools into one package. Secret scanner, dependency auditor, SSL inspector, and DNS intelligence are all available from a single install.
|
|
7
9
|
|
|
8
|
-
>
|
|
10
|
+
> This package sends usage telemetry by default (tool name + short parameters — see [`@guardbee/mcp-telemetry`](../telemetry/README.md)). Disable with `GUARDBEE_TELEMETRY=0`.
|
|
9
11
|
|
|
10
12
|
---
|
|
11
13
|
|
|
12
|
-
##
|
|
14
|
+
## Quick Start
|
|
13
15
|
|
|
14
16
|
```bash
|
|
15
17
|
npm install -g @guardbee/security-suite
|
|
16
18
|
```
|
|
17
19
|
|
|
18
|
-
### Claude Desktop (MCP —
|
|
20
|
+
### Claude Desktop (MCP — all tools, one server)
|
|
19
21
|
|
|
20
22
|
```json
|
|
21
23
|
{
|
|
@@ -30,23 +32,23 @@ npm install -g @guardbee/security-suite
|
|
|
30
32
|
|
|
31
33
|
---
|
|
32
34
|
|
|
33
|
-
## CLI
|
|
35
|
+
## CLI Usage
|
|
34
36
|
|
|
35
37
|
```bash
|
|
36
|
-
guardbee secret-scan <path> # Secret
|
|
37
|
-
guardbee dep-audit <dir> # CVE
|
|
38
|
-
guardbee ssl-inspect <domain>... # TLS
|
|
39
|
-
guardbee dns-check <domain> # DNS/SPF/DMARC
|
|
38
|
+
guardbee secret-scan <path> # Secret scanning
|
|
39
|
+
guardbee dep-audit <dir> # CVE audit
|
|
40
|
+
guardbee ssl-inspect <domain>... # TLS inspection
|
|
41
|
+
guardbee dns-check <domain> # DNS/SPF/DMARC check
|
|
40
42
|
```
|
|
41
43
|
|
|
42
|
-
###
|
|
44
|
+
### Common Options
|
|
43
45
|
|
|
44
46
|
```
|
|
45
|
-
--fail-on=<level> critical | high | medium | low (
|
|
47
|
+
--fail-on=<level> critical | high | medium | low (default: tool-specific)
|
|
46
48
|
--format=text|json|sarif
|
|
47
49
|
```
|
|
48
50
|
|
|
49
|
-
###
|
|
51
|
+
### Examples
|
|
50
52
|
|
|
51
53
|
```bash
|
|
52
54
|
guardbee secret-scan . --fail-on=high
|
|
@@ -57,7 +59,7 @@ guardbee dns-check example.com --fail-on=medium
|
|
|
57
59
|
|
|
58
60
|
---
|
|
59
61
|
|
|
60
|
-
## CI/CD
|
|
62
|
+
## CI/CD Integration
|
|
61
63
|
|
|
62
64
|
### GitHub Actions
|
|
63
65
|
|
|
@@ -115,17 +117,17 @@ guardbee-security:
|
|
|
115
117
|
|
|
116
118
|
---
|
|
117
119
|
|
|
118
|
-
##
|
|
120
|
+
## Included Tools
|
|
119
121
|
|
|
120
|
-
|
|
|
122
|
+
| Command | Package | Description |
|
|
121
123
|
|------|-------|----------|
|
|
122
|
-
| `secret-scan` | `@guardbee/mcp-secret-scanner` |
|
|
123
|
-
| `dep-audit` | `@guardbee/mcp-dependency-auditor` | OSV CVE
|
|
124
|
-
| `ssl-inspect` | `@guardbee/mcp-ssl-inspector` | TLS
|
|
124
|
+
| `secret-scan` | `@guardbee/mcp-secret-scanner` | Secret detection via 40+ patterns |
|
|
125
|
+
| `dep-audit` | `@guardbee/mcp-dependency-auditor` | OSV CVE database audit |
|
|
126
|
+
| `ssl-inspect` | `@guardbee/mcp-ssl-inspector` | TLS certificate and cipher analysis |
|
|
125
127
|
| `dns-check` | `@guardbee/mcp-dns-intelligence` | DNS, SPF, DMARC, dangling subdomain |
|
|
126
128
|
|
|
127
129
|
---
|
|
128
130
|
|
|
129
|
-
##
|
|
131
|
+
## License
|
|
130
132
|
|
|
131
133
|
MIT — [GuardBee](https://guardbee.ai)
|
package/TR.md
ADDED
|
@@ -0,0 +1,133 @@
|
|
|
1
|
+
# @guardbee/security-suite
|
|
2
|
+
|
|
3
|
+
[🇬🇧 English](README.md) | **🇹🇷 Türkçe**
|
|
4
|
+
|
|
5
|
+
[](https://www.npmjs.com/package/@guardbee/security-suite)
|
|
6
|
+
[](LICENSE)
|
|
7
|
+
|
|
8
|
+
Tüm GuardBee MCP güvenlik araçlarını tek pakette toplayan meta-paket. Secret scanner, dependency auditor, SSL inspector ve DNS intelligence tek kurulumla kullanılabilir.
|
|
9
|
+
|
|
10
|
+
> Bu paket varsayılan olarak kullanım telemetrisi gönderir (tool adı + kısa parametreler — bkz. [`@guardbee/mcp-telemetry`](../telemetry/TR.md)). Kapatmak için `GUARDBEE_TELEMETRY=0`.
|
|
11
|
+
|
|
12
|
+
---
|
|
13
|
+
|
|
14
|
+
## Hızlı Başlangıç
|
|
15
|
+
|
|
16
|
+
```bash
|
|
17
|
+
npm install -g @guardbee/security-suite
|
|
18
|
+
```
|
|
19
|
+
|
|
20
|
+
### Claude Desktop (MCP — tüm araçlar tek server)
|
|
21
|
+
|
|
22
|
+
```json
|
|
23
|
+
{
|
|
24
|
+
"mcpServers": {
|
|
25
|
+
"guardbee": {
|
|
26
|
+
"command": "npx",
|
|
27
|
+
"args": ["-y", "@guardbee/security-suite", "serve"]
|
|
28
|
+
}
|
|
29
|
+
}
|
|
30
|
+
}
|
|
31
|
+
```
|
|
32
|
+
|
|
33
|
+
---
|
|
34
|
+
|
|
35
|
+
## CLI Kullanımı
|
|
36
|
+
|
|
37
|
+
```bash
|
|
38
|
+
guardbee secret-scan <path> # Secret taraması
|
|
39
|
+
guardbee dep-audit <dir> # CVE denetimi
|
|
40
|
+
guardbee ssl-inspect <domain>... # TLS denetimi
|
|
41
|
+
guardbee dns-check <domain> # DNS/SPF/DMARC kontrolü
|
|
42
|
+
```
|
|
43
|
+
|
|
44
|
+
### Ortak Seçenekler
|
|
45
|
+
|
|
46
|
+
```
|
|
47
|
+
--fail-on=<level> critical | high | medium | low (varsayılan: araç özelinde)
|
|
48
|
+
--format=text|json|sarif
|
|
49
|
+
```
|
|
50
|
+
|
|
51
|
+
### Örnekler
|
|
52
|
+
|
|
53
|
+
```bash
|
|
54
|
+
guardbee secret-scan . --fail-on=high
|
|
55
|
+
guardbee dep-audit . --fail-on=critical --format=sarif > results.sarif
|
|
56
|
+
guardbee ssl-inspect example.com api.example.com shop.example.com
|
|
57
|
+
guardbee dns-check example.com --fail-on=medium
|
|
58
|
+
```
|
|
59
|
+
|
|
60
|
+
---
|
|
61
|
+
|
|
62
|
+
## CI/CD Entegrasyonu
|
|
63
|
+
|
|
64
|
+
### GitHub Actions
|
|
65
|
+
|
|
66
|
+
```yaml
|
|
67
|
+
name: Security Suite
|
|
68
|
+
on: [push, pull_request]
|
|
69
|
+
|
|
70
|
+
jobs:
|
|
71
|
+
security:
|
|
72
|
+
runs-on: ubuntu-latest
|
|
73
|
+
steps:
|
|
74
|
+
- uses: actions/checkout@v4
|
|
75
|
+
- uses: actions/setup-node@v4
|
|
76
|
+
with: { node-version: 20 }
|
|
77
|
+
- run: npm ci
|
|
78
|
+
|
|
79
|
+
- name: Secret scan
|
|
80
|
+
run: npx @guardbee/security-suite secret-scan . --fail-on=high
|
|
81
|
+
|
|
82
|
+
- name: Dependency audit
|
|
83
|
+
run: npx @guardbee/security-suite dep-audit . --fail-on=high
|
|
84
|
+
|
|
85
|
+
- name: SARIF upload (GitHub Security tab)
|
|
86
|
+
if: always()
|
|
87
|
+
run: |
|
|
88
|
+
npx @guardbee/security-suite secret-scan . --format=sarif > secrets.sarif || true
|
|
89
|
+
npx @guardbee/security-suite dep-audit . --format=sarif > deps.sarif || true
|
|
90
|
+
|
|
91
|
+
- uses: github/codeql-action/upload-sarif@v3
|
|
92
|
+
if: always()
|
|
93
|
+
with:
|
|
94
|
+
sarif_file: secrets.sarif
|
|
95
|
+
|
|
96
|
+
- uses: github/codeql-action/upload-sarif@v3
|
|
97
|
+
if: always()
|
|
98
|
+
with:
|
|
99
|
+
sarif_file: deps.sarif
|
|
100
|
+
```
|
|
101
|
+
|
|
102
|
+
### GitLab CI
|
|
103
|
+
|
|
104
|
+
```yaml
|
|
105
|
+
include:
|
|
106
|
+
- template: Security/Secret-Detection.gitlab-ci.yml
|
|
107
|
+
|
|
108
|
+
guardbee-security:
|
|
109
|
+
image: node:20
|
|
110
|
+
script:
|
|
111
|
+
- npx @guardbee/security-suite secret-scan . --fail-on=high
|
|
112
|
+
- npx @guardbee/security-suite dep-audit . --fail-on=high
|
|
113
|
+
only:
|
|
114
|
+
- merge_requests
|
|
115
|
+
- main
|
|
116
|
+
```
|
|
117
|
+
|
|
118
|
+
---
|
|
119
|
+
|
|
120
|
+
## Dahil Olan Araçlar
|
|
121
|
+
|
|
122
|
+
| Araç | Paket | Açıklama |
|
|
123
|
+
|------|-------|----------|
|
|
124
|
+
| `secret-scan` | `@guardbee/mcp-secret-scanner` | 40+ pattern ile secret tespiti |
|
|
125
|
+
| `dep-audit` | `@guardbee/mcp-dependency-auditor` | OSV CVE veritabanı denetimi |
|
|
126
|
+
| `ssl-inspect` | `@guardbee/mcp-ssl-inspector` | TLS sertifika ve cipher analizi |
|
|
127
|
+
| `dns-check` | `@guardbee/mcp-dns-intelligence` | DNS, SPF, DMARC, dangling subdomain |
|
|
128
|
+
|
|
129
|
+
---
|
|
130
|
+
|
|
131
|
+
## Lisans
|
|
132
|
+
|
|
133
|
+
MIT — [GuardBee](https://guardbee.ai)
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@guardbee/security-suite",
|
|
3
|
-
"version": "0.2.
|
|
3
|
+
"version": "0.2.1",
|
|
4
4
|
"description": "All GuardBee MCP security tools in one package — secret scanner, dependency auditor, SSL inspector, DNS intelligence",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"bin": {
|
|
@@ -10,16 +10,17 @@
|
|
|
10
10
|
"main": "./dist/index.js",
|
|
11
11
|
"files": [
|
|
12
12
|
"dist",
|
|
13
|
-
"README.md"
|
|
13
|
+
"README.md",
|
|
14
|
+
"TR.md"
|
|
14
15
|
],
|
|
15
16
|
"dependencies": {
|
|
16
17
|
"@modelcontextprotocol/sdk": "^1.0.0",
|
|
17
18
|
"zod": "^4.5.4",
|
|
18
|
-
"@guardbee/mcp-dependency-auditor": "^0.2.
|
|
19
|
-
"@guardbee/mcp-telemetry": "^0.1.
|
|
20
|
-
"@guardbee/mcp-dns-intelligence": "^0.2.
|
|
21
|
-
"@guardbee/mcp-
|
|
22
|
-
"@guardbee/mcp-
|
|
19
|
+
"@guardbee/mcp-dependency-auditor": "^0.2.1",
|
|
20
|
+
"@guardbee/mcp-telemetry": "^0.1.1",
|
|
21
|
+
"@guardbee/mcp-dns-intelligence": "^0.2.1",
|
|
22
|
+
"@guardbee/mcp-ssl-inspector": "^0.2.1",
|
|
23
|
+
"@guardbee/mcp-secret-scanner": "^0.2.1"
|
|
23
24
|
},
|
|
24
25
|
"keywords": [
|
|
25
26
|
"mcp",
|