@mondoohq/xgrep_windows_amd64 0.1.0 → 0.1.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +32 -28
- package/package.json +1 -1
- package/xgrep.exe +0 -0
package/README.md
CHANGED
|
@@ -1,27 +1,38 @@
|
|
|
1
|
-
# xgrep
|
|
1
|
+
# @mondoohq/xgrep
|
|
2
2
|
|
|
3
3
|
A fast, Semgrep-compatible code scanner written in Go.
|
|
4
4
|
|
|
5
|
-
xgrep scans codebases using Semgrep YAML rule syntax and tree-sitter for
|
|
6
|
-
AST-based pattern matching. It optimizes for **accuracy** — when
|
|
7
|
-
vulnerability, it should be real and exploitable — and adds
|
|
8
|
-
AI-agent features on top of scanning.
|
|
9
|
-
[design goals](docs/01-getting-started/index.md#design-goals).
|
|
5
|
+
xgrep scans codebases using Semgrep YAML rule syntax and tree-sitter for
|
|
6
|
+
language-aware, AST-based pattern matching. It optimizes for **accuracy** — when
|
|
7
|
+
it reports a vulnerability, it should be real and exploitable — and adds
|
|
8
|
+
code-intelligence and AI-agent features on top of scanning.
|
|
10
9
|
|
|
11
|
-
|
|
10
|
+
This npm package ships prebuilt `xgrep` binaries; installing it puts the
|
|
11
|
+
`xgrep` command on your `PATH`.
|
|
12
|
+
|
|
13
|
+
## Run with npx
|
|
14
|
+
|
|
15
|
+
No install required:
|
|
12
16
|
|
|
13
17
|
```bash
|
|
14
|
-
|
|
18
|
+
npx @mondoohq/xgrep --help
|
|
19
|
+
npx @mondoohq/xgrep -f rules.yaml src/
|
|
15
20
|
```
|
|
16
21
|
|
|
17
|
-
|
|
22
|
+
## Install
|
|
18
23
|
|
|
19
24
|
```bash
|
|
20
|
-
|
|
21
|
-
|
|
22
|
-
|
|
25
|
+
# Global install (adds the `xgrep` command)
|
|
26
|
+
npm install -g @mondoohq/xgrep
|
|
27
|
+
xgrep --help
|
|
28
|
+
|
|
29
|
+
# Or as a project dev dependency
|
|
30
|
+
npm install --save-dev @mondoohq/xgrep
|
|
23
31
|
```
|
|
24
32
|
|
|
33
|
+
The wrapper package resolves and installs the correct binary for your OS and
|
|
34
|
+
architecture (Linux and Windows, amd64 and arm64).
|
|
35
|
+
|
|
25
36
|
## Quick start
|
|
26
37
|
|
|
27
38
|
```bash
|
|
@@ -34,8 +45,9 @@ xgrep -f rules.yaml --sarif src/ # GitHub Code Scanning
|
|
|
34
45
|
xgrep -f rules.yaml --gitlab -o gl-sast-report.json src/ # GitLab SAST
|
|
35
46
|
```
|
|
36
47
|
|
|
37
|
-
A scan target can also be a **remote git repository** — xgrep clones it
|
|
38
|
-
default branch) into a temp directory and scans it, no manual clone
|
|
48
|
+
A scan target can also be a **remote git repository** — xgrep clones it
|
|
49
|
+
(shallow, default branch) into a temp directory and scans it, no manual clone
|
|
50
|
+
needed:
|
|
39
51
|
|
|
40
52
|
```bash
|
|
41
53
|
xgrep scan github.com/mondoohq/xgrep # host/owner/repo shorthand
|
|
@@ -43,21 +55,13 @@ xgrep scan https://github.com/mondoohq/xgrep # or a full HTTPS/SSH URL
|
|
|
43
55
|
xgrep scan github.com/mondoohq/xgrep --ref v1.2.0 # a branch, tag, or commit
|
|
44
56
|
```
|
|
45
57
|
|
|
46
|
-
See the [remote-repository section](docs/02-scanning/cli-reference.md#scanning-a-remote-repository)
|
|
47
|
-
for `--ref`, `--depth`, and `--full-clone`.
|
|
48
|
-
|
|
49
58
|
## Documentation
|
|
50
59
|
|
|
51
|
-
Full documentation
|
|
60
|
+
Full documentation, rule-writing guides, and the CLI reference live in the
|
|
61
|
+
project repository:
|
|
62
|
+
|
|
63
|
+
**https://github.com/mondoohq/xgrep**
|
|
52
64
|
|
|
53
|
-
|
|
54
|
-
- **[Scanning](docs/02-scanning/index.md)** — CLI reference, output formats, supported
|
|
55
|
-
languages, file filtering, and Semgrep compatibility.
|
|
56
|
-
- **[Rules](docs/03-rules/index.md)** — writing, syntax, taint analysis, and testing rules.
|
|
57
|
-
- **[Code intelligence](docs/04-code-intelligence/index.md)** — `xgrep inspect` and the code graph.
|
|
58
|
-
- **[Integrations](docs/05-integrations/index.md)** — MCP, LSP, and CI.
|
|
59
|
-
- **[AI agents](docs/06-ai-agents/index.md)** — using xgrep as an agent backend (see also
|
|
60
|
-
[`AGENTS.md`](AGENTS.md)).
|
|
65
|
+
## License
|
|
61
66
|
|
|
62
|
-
|
|
63
|
-
[architecture decision records](docs/adr).
|
|
67
|
+
Apache-2.0 — see https://github.com/mondoohq/xgrep/blob/main/LICENSE
|
package/package.json
CHANGED
package/xgrep.exe
CHANGED
|
Binary file
|