@mondoohq/xgrep_linux_amd64 0.1.2 → 0.3.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +27 -37
- package/package.json +1 -1
- package/xgrep +0 -0
package/README.md
CHANGED
|
@@ -7,42 +7,30 @@ language-aware, AST-based pattern matching. It optimizes for **accuracy** — wh
|
|
|
7
7
|
it reports a vulnerability, it should be real and exploitable — and adds
|
|
8
8
|
code-intelligence and AI-agent features on top of scanning.
|
|
9
9
|
|
|
10
|
-
This npm package ships prebuilt `xgrep` binaries
|
|
11
|
-
|
|
10
|
+
This npm package ships prebuilt `xgrep` binaries for Linux, macOS, and Windows
|
|
11
|
+
(amd64 and arm64; the macOS binaries are signed and notarized).
|
|
12
12
|
|
|
13
|
-
##
|
|
13
|
+
## Quick start
|
|
14
14
|
|
|
15
|
-
|
|
15
|
+
xgrep ships with a built-in rule corpus, so no rules file is needed to get
|
|
16
|
+
started — run it straight from npx:
|
|
16
17
|
|
|
17
18
|
```bash
|
|
18
|
-
|
|
19
|
-
npx @mondoohq/xgrep
|
|
19
|
+
# Scan the current directory with the built-in rules (defaults to security)
|
|
20
|
+
npx @mondoohq/xgrep scan .
|
|
20
21
|
```
|
|
21
22
|
|
|
22
|
-
## Install
|
|
23
|
-
|
|
24
23
|
```bash
|
|
25
|
-
#
|
|
26
|
-
|
|
27
|
-
xgrep --help
|
|
28
|
-
|
|
29
|
-
# Or as a project dev dependency
|
|
30
|
-
npm install --save-dev @mondoohq/xgrep
|
|
31
|
-
```
|
|
32
|
-
|
|
33
|
-
The wrapper package resolves and installs the correct binary for your OS and
|
|
34
|
-
architecture (Linux and Windows, amd64 and arm64).
|
|
35
|
-
|
|
36
|
-
## Quick start
|
|
37
|
-
|
|
38
|
-
```bash
|
|
39
|
-
# Scan a directory with a rule file (or a directory of rules)
|
|
40
|
-
xgrep -f rules.yaml src/
|
|
24
|
+
# Choose a category (default: security)
|
|
25
|
+
npx @mondoohq/xgrep scan --category correctness .
|
|
41
26
|
|
|
42
27
|
# Machine-readable output
|
|
43
|
-
xgrep
|
|
44
|
-
xgrep
|
|
45
|
-
xgrep
|
|
28
|
+
npx @mondoohq/xgrep scan --json .
|
|
29
|
+
npx @mondoohq/xgrep scan --sarif . # GitHub Code Scanning
|
|
30
|
+
npx @mondoohq/xgrep scan --gitlab -o gl-sast-report.json . # GitLab SAST
|
|
31
|
+
|
|
32
|
+
# Bring your own rules: point -f at a rule file or a directory of rules
|
|
33
|
+
npx @mondoohq/xgrep scan -f rules.yaml src/
|
|
46
34
|
```
|
|
47
35
|
|
|
48
36
|
A scan target can also be a **remote git repository** — xgrep clones it
|
|
@@ -50,18 +38,20 @@ A scan target can also be a **remote git repository** — xgrep clones it
|
|
|
50
38
|
needed:
|
|
51
39
|
|
|
52
40
|
```bash
|
|
53
|
-
xgrep scan github.com/mondoohq/xgrep # host/owner/repo shorthand
|
|
54
|
-
xgrep scan https://github.com/mondoohq/xgrep # or a full HTTPS/SSH URL
|
|
55
|
-
xgrep scan github.com/mondoohq/xgrep --ref v1.2.0 # a branch, tag, or commit
|
|
41
|
+
npx @mondoohq/xgrep scan github.com/mondoohq/xgrep # host/owner/repo shorthand
|
|
42
|
+
npx @mondoohq/xgrep scan https://github.com/mondoohq/xgrep # or a full HTTPS/SSH URL
|
|
43
|
+
npx @mondoohq/xgrep scan github.com/mondoohq/xgrep --ref v1.2.0 # a branch, tag, or commit
|
|
56
44
|
```
|
|
57
45
|
|
|
58
|
-
##
|
|
59
|
-
|
|
60
|
-
Full documentation, rule-writing guides, and the CLI reference live in the
|
|
61
|
-
project repository:
|
|
46
|
+
## Install
|
|
62
47
|
|
|
63
|
-
|
|
48
|
+
To add the `xgrep` command to your `PATH` instead of using npx:
|
|
64
49
|
|
|
65
|
-
|
|
50
|
+
```bash
|
|
51
|
+
# Global install
|
|
52
|
+
npm install -g @mondoohq/xgrep
|
|
53
|
+
xgrep scan .
|
|
66
54
|
|
|
67
|
-
|
|
55
|
+
# Or as a project dev dependency
|
|
56
|
+
npm install --save-dev @mondoohq/xgrep
|
|
57
|
+
```
|
package/package.json
CHANGED
package/xgrep
CHANGED
|
Binary file
|