@orionscanner/cli 0.1.1 → 0.5.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +137 -134
- package/bin/orion.js +1 -1
- package/dist/orion.exe +0 -0
- package/package.json +46 -46
package/README.md
CHANGED
|
@@ -1,135 +1,138 @@
|
|
|
1
|
-
# Orion Security Suite
|
|
2
|
-
|
|
3
|
-
<p align="center">
|
|
4
|
-
<img src="assets/logo.png" alt="Orion Security Suite" width="460" />
|
|
5
|
-
</p>
|
|
6
|
-
|
|
7
|
-
<p align="center">
|
|
8
|
-
<strong>SEE. ANALYZE. IMPROVE.</strong><br>
|
|
9
|
-
<em>The Autonomous, In-House Code Intelligence & Enterprise Security Audit Platform</em>
|
|
10
|
-
</p>
|
|
11
|
-
|
|
12
|
-
<p align="center">
|
|
13
|
-
<a href="https://www.npmjs.com/package/@orionscanner/cli"><img src="https://img.shields.io/badge/npm-v0.1
|
|
14
|
-
<img src="https://img.shields.io/badge/version-0.1
|
|
15
|
-
<img src="https://img.shields.io/badge/security-In--House%20Core-emerald.svg" alt="Security" />
|
|
16
|
-
<img src="https://img.shields.io/badge/platform-Windows%20%7C%20macOS%20%7C%20Linux-lightgrey.svg" alt="Platform" />
|
|
17
|
-
</p>
|
|
18
|
-
|
|
19
|
-
---
|
|
20
|
-
|
|
21
|
-
## Why Choose Orion?
|
|
22
|
-
|
|
23
|
-
Modern development teams face fragmented security tools, high false-alarm noise, and code privacy risks from sending proprietary source files to third-party clouds.
|
|
24
|
-
|
|
25
|
-
**Orion Security Suite** solves this with a unified, zero-cloud, 100% in-house code audit powerhouse that runs entirely on your local infrastructure.
|
|
26
|
-
|
|
27
|
-
```
|
|
28
|
-
┌────────────────────────────────────────┐
|
|
29
|
-
│ ORION SECURITY SUITE │
|
|
30
|
-
│ SEE. ANALYZE. IMPROVE. │
|
|
31
|
-
└───────────────────┬────────────────────┘
|
|
32
|
-
│
|
|
33
|
-
┌────────────────────────────┼────────────────────────────┐
|
|
34
|
-
▼ ▼ ▼
|
|
35
|
-
🛡️ Application Security 🧠 AI & LLM Defense ⚡ Code Quality & Flow
|
|
36
|
-
• Deep SAST & Sinks • Prompt Injection Shields • Complexity & O(n²) Guard
|
|
37
|
-
• Taint Flow Analysis • Agent Trust Boundaries • Dead Code Elimination
|
|
38
|
-
• Secret & Key Leak Hunter • Automated STRIDE Threat • Clean Architecture Graph
|
|
39
|
-
```
|
|
40
|
-
|
|
41
|
-
---
|
|
42
|
-
|
|
43
|
-
## Instant Quick Start
|
|
44
|
-
|
|
45
|
-
### 🚀 Install via NPM (One-Line Global Setup)
|
|
46
|
-
|
|
47
|
-
```bash
|
|
48
|
-
npm install -g @orionscanner/cli
|
|
49
|
-
```
|
|
50
|
-
|
|
51
|
-
*Or run instantly with `npx` (zero installation required):*
|
|
52
|
-
```bash
|
|
53
|
-
npx @orionscanner/cli .
|
|
54
|
-
```
|
|
55
|
-
|
|
56
|
-
---
|
|
57
|
-
|
|
58
|
-
### 🐍 Install via Python
|
|
59
|
-
|
|
60
|
-
```bash
|
|
61
|
-
# Clone the repository
|
|
62
|
-
git clone https://github.com/chandrahotha/OrionEngine.git
|
|
63
|
-
cd OrionEngine
|
|
64
|
-
|
|
65
|
-
# Install locally in editable mode
|
|
66
|
-
pip install -e .
|
|
67
|
-
```
|
|
68
|
-
|
|
69
|
-
---
|
|
70
|
-
|
|
71
|
-
## ⚡ Supercharged CLI Experience
|
|
72
|
-
|
|
73
|
-
Audit your entire codebase in seconds with intuitive commands:
|
|
74
|
-
|
|
75
|
-
```bash
|
|
76
|
-
# Complete Workspace Audit (All Security, Quality & Architecture Engines)
|
|
77
|
-
orion .
|
|
78
|
-
|
|
79
|
-
# Targeted Security & Deep SAST Audit
|
|
80
|
-
orion . --security
|
|
81
|
-
|
|
82
|
-
# Automated STRIDE Threat Modeling & PII Privacy Inspection
|
|
83
|
-
orion . --threat
|
|
84
|
-
|
|
85
|
-
# AI Agent Defense & Prompt Injection Testing
|
|
86
|
-
orion . --ai
|
|
87
|
-
|
|
88
|
-
# Cloud Configuration & Container Security Audit
|
|
89
|
-
orion . --iac
|
|
90
|
-
|
|
91
|
-
# Code Quality, Complexity & Architecture Sweep
|
|
92
|
-
orion . --quality
|
|
93
|
-
|
|
94
|
-
# Launch Interactive Terminal Management Console
|
|
95
|
-
orion
|
|
96
|
-
```
|
|
97
|
-
|
|
98
|
-
---
|
|
99
|
-
|
|
100
|
-
## 💎 The Orion Advantage
|
|
101
|
-
|
|
102
|
-
### 🔒 100% In-House, Zero-Cloud Privacy
|
|
103
|
-
Your proprietary source code never leaves your workstation or CI/CD runner. Every parser, AST visitor, heuristic rule, and taint-flow engine is 100% custom-built and executes locally with zero external subprocess dependencies.
|
|
104
|
-
|
|
105
|
-
### 📊 Beautiful, Executive-Ready Reports
|
|
106
|
-
Every scan generates self-contained executive intelligence reports in `ORION SCANNER REPORTS/`:
|
|
107
|
-
- **Interactive HTML Dashboard**: Filter findings by category (`Security`, `Code Quality`, `Architecture`, `Supply Chain`) and severity.
|
|
108
|
-
- **One-Click PDF Export**: Clean, printable executive summary ready for stakeholders and compliance audits.
|
|
109
|
-
- **Machine-Readable JSON**: Complete structured finding metadata with CWE mappings and confidence scores.
|
|
110
|
-
|
|
111
|
-
### 🎯 High-Precision Signal, Zero Fluff
|
|
112
|
-
Orion
|
|
113
|
-
|
|
114
|
-
|
|
115
|
-
|
|
116
|
-
|
|
117
|
-
|
|
118
|
-
|
|
119
|
-
|
|
120
|
-
|
|
121
|
-
|
|
122
|
-
|
|
123
|
-
|
|
124
|
-
|
|
125
|
-
|
|
126
|
-
|
|
127
|
-
|
|
128
|
-
|
|
129
|
-
|
|
130
|
-
|
|
131
|
-
|
|
132
|
-
|
|
133
|
-
|
|
134
|
-
|
|
1
|
+
# Orion Security Suite
|
|
2
|
+
|
|
3
|
+
<p align="center">
|
|
4
|
+
<img src="assets/logo.png" alt="Orion Security Suite" width="460" />
|
|
5
|
+
</p>
|
|
6
|
+
|
|
7
|
+
<p align="center">
|
|
8
|
+
<strong>SEE. ANALYZE. IMPROVE.</strong><br>
|
|
9
|
+
<em>The Autonomous, In-House Code Intelligence & Enterprise Security Audit Platform</em>
|
|
10
|
+
</p>
|
|
11
|
+
|
|
12
|
+
<p align="center">
|
|
13
|
+
<a href="https://www.npmjs.com/package/@orionscanner/cli"><img src="https://img.shields.io/badge/npm-v0.5.1-cb3837?logo=npm" alt="npm" /></a>
|
|
14
|
+
<img src="https://img.shields.io/badge/version-0.5.1-blue.svg" alt="Version 0.5.1" />
|
|
15
|
+
<img src="https://img.shields.io/badge/security-In--House%20Core-emerald.svg" alt="Security" />
|
|
16
|
+
<img src="https://img.shields.io/badge/platform-Windows%20%7C%20macOS%20%7C%20Linux-lightgrey.svg" alt="Platform" />
|
|
17
|
+
</p>
|
|
18
|
+
|
|
19
|
+
---
|
|
20
|
+
|
|
21
|
+
## Why Choose Orion?
|
|
22
|
+
|
|
23
|
+
Modern development teams face fragmented security tools, high false-alarm noise, and code privacy risks from sending proprietary source files to third-party clouds.
|
|
24
|
+
|
|
25
|
+
**Orion Security Suite** solves this with a unified, zero-cloud, 100% in-house code audit powerhouse that runs entirely on your local infrastructure.
|
|
26
|
+
|
|
27
|
+
```
|
|
28
|
+
┌────────────────────────────────────────┐
|
|
29
|
+
│ ORION SECURITY SUITE │
|
|
30
|
+
│ SEE. ANALYZE. IMPROVE. │
|
|
31
|
+
└───────────────────┬────────────────────┘
|
|
32
|
+
│
|
|
33
|
+
┌────────────────────────────┼────────────────────────────┐
|
|
34
|
+
▼ ▼ ▼
|
|
35
|
+
🛡️ Application Security 🧠 AI & LLM Defense ⚡ Code Quality & Flow
|
|
36
|
+
• Deep SAST & Sinks • Prompt Injection Shields • Complexity & O(n²) Guard
|
|
37
|
+
• Taint Flow Analysis • Agent Trust Boundaries • Dead Code Elimination
|
|
38
|
+
• Secret & Key Leak Hunter • Automated STRIDE Threat • Clean Architecture Graph
|
|
39
|
+
```
|
|
40
|
+
|
|
41
|
+
---
|
|
42
|
+
|
|
43
|
+
## Instant Quick Start
|
|
44
|
+
|
|
45
|
+
### 🚀 Install via NPM (One-Line Global Setup)
|
|
46
|
+
|
|
47
|
+
```bash
|
|
48
|
+
npm install -g @orionscanner/cli
|
|
49
|
+
```
|
|
50
|
+
|
|
51
|
+
*Or run instantly with `npx` (zero installation required):*
|
|
52
|
+
```bash
|
|
53
|
+
npx @orionscanner/cli .
|
|
54
|
+
```
|
|
55
|
+
|
|
56
|
+
---
|
|
57
|
+
|
|
58
|
+
### 🐍 Install via Python
|
|
59
|
+
|
|
60
|
+
```bash
|
|
61
|
+
# Clone the repository
|
|
62
|
+
git clone https://github.com/chandrahotha/OrionEngine.git
|
|
63
|
+
cd OrionEngine
|
|
64
|
+
|
|
65
|
+
# Install locally in editable mode
|
|
66
|
+
pip install -e .
|
|
67
|
+
```
|
|
68
|
+
|
|
69
|
+
---
|
|
70
|
+
|
|
71
|
+
## ⚡ Supercharged CLI Experience
|
|
72
|
+
|
|
73
|
+
Audit your entire codebase in seconds with intuitive commands:
|
|
74
|
+
|
|
75
|
+
```bash
|
|
76
|
+
# Complete Workspace Audit (All Security, Quality & Architecture Engines)
|
|
77
|
+
orion .
|
|
78
|
+
|
|
79
|
+
# Targeted Security & Deep SAST Audit
|
|
80
|
+
orion . --security
|
|
81
|
+
|
|
82
|
+
# Automated STRIDE Threat Modeling & PII Privacy Inspection
|
|
83
|
+
orion . --threat
|
|
84
|
+
|
|
85
|
+
# AI Agent Defense & Prompt Injection Testing
|
|
86
|
+
orion . --ai
|
|
87
|
+
|
|
88
|
+
# Cloud Configuration & Container Security Audit
|
|
89
|
+
orion . --iac
|
|
90
|
+
|
|
91
|
+
# Code Quality, Complexity & Architecture Sweep
|
|
92
|
+
orion . --quality
|
|
93
|
+
|
|
94
|
+
# Launch Interactive Terminal Management Console
|
|
95
|
+
orion
|
|
96
|
+
```
|
|
97
|
+
|
|
98
|
+
---
|
|
99
|
+
|
|
100
|
+
## 💎 The Orion Advantage
|
|
101
|
+
|
|
102
|
+
### 🔒 100% In-House, Zero-Cloud Privacy
|
|
103
|
+
Your proprietary source code never leaves your workstation or CI/CD runner. Every parser, AST visitor, heuristic rule, and taint-flow engine is 100% custom-built and executes locally with zero external subprocess dependencies.
|
|
104
|
+
|
|
105
|
+
### 📊 Beautiful, Executive-Ready Reports
|
|
106
|
+
Every scan generates self-contained executive intelligence reports in `ORION SCANNER REPORTS/`:
|
|
107
|
+
- **Interactive HTML Dashboard**: Filter findings by category (`Security`, `Code Quality`, `Architecture`, `Supply Chain`) and severity.
|
|
108
|
+
- **One-Click PDF Export**: Clean, printable executive summary ready for stakeholders and compliance audits.
|
|
109
|
+
- **Machine-Readable JSON**: Complete structured finding metadata with CWE mappings and confidence scores.
|
|
110
|
+
|
|
111
|
+
### 🎯 High-Precision Signal, Zero Fluff
|
|
112
|
+
Orion suppresses duplicate/generated-file noise, learns from your `.orion-feedback.json` corrections, and honors inline `# orion:ignore` comments — delivering actionable findings you can trust.
|
|
113
|
+
|
|
114
|
+
### 🤖 Optional AI Verification (Bring Your Own Key)
|
|
115
|
+
For an extra layer of confirmation on top of the fully offline static engines, Orion can optionally send its highest-severity findings to an LLM for a second opinion — using **your own API key** for Anthropic, OpenAI, DeepSeek, Grok, or OpenRouter. This is opt-in and disabled by default; without a key and explicit network permission, Orion runs entirely offline as always.
|
|
116
|
+
|
|
117
|
+
---
|
|
118
|
+
|
|
119
|
+
## 🛠️ Multi-Language Codebase Support
|
|
120
|
+
|
|
121
|
+
Orion automatically detects and audits your entire multi-language stack:
|
|
122
|
+
|
|
123
|
+
- **Languages**: Python, JavaScript, TypeScript, Go, Java, Rust, Ruby, PHP, C/C++, C#, Shell, SQL
|
|
124
|
+
- **Cloud & DevOps**: Dockerfile, `docker-compose.yml`, Kubernetes Manifests, Terraform, GitHub Actions
|
|
125
|
+
- **Dependency Manifests**: `package.json`, `requirements.txt`, `pyproject.toml`, `go.mod`, `Cargo.toml`, `pom.xml`
|
|
126
|
+
|
|
127
|
+
---
|
|
128
|
+
|
|
129
|
+
## 📦 NPM Package Links
|
|
130
|
+
|
|
131
|
+
- **NPM Package**: [`https://www.npmjs.com/package/@orionscanner/cli`](https://www.npmjs.com/package/@orionscanner/cli)
|
|
132
|
+
- **GitHub Repository**: [`https://github.com/chandrahotha/OrionEngine`](https://github.com/chandrahotha/OrionEngine)
|
|
133
|
+
|
|
134
|
+
---
|
|
135
|
+
|
|
136
|
+
## License & Intellectual Property
|
|
137
|
+
|
|
135
138
|
Orion Security Suite is a proprietary, in-house developed codebase intelligence platform. All engines, algorithms, and AST analyzers are original intellectual property built for high-performance security auditing.
|
package/bin/orion.js
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
#!/usr/bin/env node
|
|
2
2
|
/**
|
|
3
|
-
* Orion Security Suite - Protected Standalone Binary Wrapper (v0.
|
|
3
|
+
* Orion Security Suite - Protected Standalone Binary Wrapper (v0.5.1)
|
|
4
4
|
* 100% In-House Code Intelligence & SAST Platform
|
|
5
5
|
* (Zero Python Source Code Distributed)
|
|
6
6
|
*/
|
package/dist/orion.exe
CHANGED
|
Binary file
|
package/package.json
CHANGED
|
@@ -1,46 +1,46 @@
|
|
|
1
|
-
{
|
|
2
|
-
"name": "@orionscanner/cli",
|
|
3
|
-
"version": "0.
|
|
4
|
-
"description": "Orion Security Suite - Proprietary In-House Code Intelligence, SAST & Architecture Auditing Platform",
|
|
5
|
-
"main": "bin/orion.js",
|
|
6
|
-
"bin": {
|
|
7
|
-
"orion": "bin/orion.js",
|
|
8
|
-
"orion-engine": "bin/orion.js",
|
|
9
|
-
"orion-cli": "bin/orion.js"
|
|
10
|
-
},
|
|
11
|
-
"scripts": {
|
|
12
|
-
"start": "node bin/orion.js",
|
|
13
|
-
"orion": "node bin/orion.js"
|
|
14
|
-
},
|
|
15
|
-
"keywords": [
|
|
16
|
-
"orion",
|
|
17
|
-
"security",
|
|
18
|
-
"sast",
|
|
19
|
-
"code-audit",
|
|
20
|
-
"static-analysis",
|
|
21
|
-
"taint-analysis",
|
|
22
|
-
"code-quality",
|
|
23
|
-
"threat-modeling",
|
|
24
|
-
"privacy-shield",
|
|
25
|
-
"architecture"
|
|
26
|
-
],
|
|
27
|
-
"author": "Chandra Hotha",
|
|
28
|
-
"license": "UNLICENSED",
|
|
29
|
-
"engines": {
|
|
30
|
-
"node": ">=16.0.0"
|
|
31
|
-
},
|
|
32
|
-
"repository": {
|
|
33
|
-
"type": "git",
|
|
34
|
-
"url": "git+https://github.com/chandrahotha/OrionEngine.git"
|
|
35
|
-
},
|
|
36
|
-
"bugs": {
|
|
37
|
-
"url": "https://github.com/chandrahotha/OrionEngine/issues"
|
|
38
|
-
},
|
|
39
|
-
"homepage": "https://github.com/chandrahotha/OrionEngine#readme",
|
|
40
|
-
"files": [
|
|
41
|
-
"bin/",
|
|
42
|
-
"dist/",
|
|
43
|
-
"assets/",
|
|
44
|
-
"README.md"
|
|
45
|
-
]
|
|
46
|
-
}
|
|
1
|
+
{
|
|
2
|
+
"name": "@orionscanner/cli",
|
|
3
|
+
"version": "0.5.1",
|
|
4
|
+
"description": "Orion Security Suite - Proprietary In-House Code Intelligence, SAST & Architecture Auditing Platform",
|
|
5
|
+
"main": "bin/orion.js",
|
|
6
|
+
"bin": {
|
|
7
|
+
"orion": "bin/orion.js",
|
|
8
|
+
"orion-engine": "bin/orion.js",
|
|
9
|
+
"orion-cli": "bin/orion.js"
|
|
10
|
+
},
|
|
11
|
+
"scripts": {
|
|
12
|
+
"start": "node bin/orion.js",
|
|
13
|
+
"orion": "node bin/orion.js"
|
|
14
|
+
},
|
|
15
|
+
"keywords": [
|
|
16
|
+
"orion",
|
|
17
|
+
"security",
|
|
18
|
+
"sast",
|
|
19
|
+
"code-audit",
|
|
20
|
+
"static-analysis",
|
|
21
|
+
"taint-analysis",
|
|
22
|
+
"code-quality",
|
|
23
|
+
"threat-modeling",
|
|
24
|
+
"privacy-shield",
|
|
25
|
+
"architecture"
|
|
26
|
+
],
|
|
27
|
+
"author": "Chandra Hotha",
|
|
28
|
+
"license": "UNLICENSED",
|
|
29
|
+
"engines": {
|
|
30
|
+
"node": ">=16.0.0"
|
|
31
|
+
},
|
|
32
|
+
"repository": {
|
|
33
|
+
"type": "git",
|
|
34
|
+
"url": "git+https://github.com/chandrahotha/OrionEngine.git"
|
|
35
|
+
},
|
|
36
|
+
"bugs": {
|
|
37
|
+
"url": "https://github.com/chandrahotha/OrionEngine/issues"
|
|
38
|
+
},
|
|
39
|
+
"homepage": "https://github.com/chandrahotha/OrionEngine#readme",
|
|
40
|
+
"files": [
|
|
41
|
+
"bin/",
|
|
42
|
+
"dist/",
|
|
43
|
+
"assets/",
|
|
44
|
+
"README.md"
|
|
45
|
+
]
|
|
46
|
+
}
|