@sulthonzh/mcp-audit 1.1.0

package/dist/scanners/k8s-scanner.js

@@ -0,0 +1,315 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.scanK8s = scanK8s;
+const fs_extra_1 = __importDefault(require("fs-extra"));
+const path_1 = __importDefault(require("path"));
+const js_yaml_1 = __importDefault(require("js-yaml"));
+const logger_1 = require("../utils/logger");
+function extractPodSpec(manifest) {
+    const kind = manifest.kind?.toLowerCase() ?? '';
+    if (kind === 'pod')
+        return manifest.spec;
+    if (['deployment', 'statefulset', 'daemonset', 'replicaset', 'job'].includes(kind)) {
+        return manifest.spec?.template?.spec ?? null;
+    }
+    return null;
+}
+function checkPodSpec(podSpec, relPath, manifestName) {
+    const issues = [];
+    if (!podSpec)
+        return issues;
+    const containers = podSpec.containers ?? [];
+    const initContainers = podSpec.initContainers ?? [];
+    const allContainers = [...containers, ...initContainers];
+    for (const ctr of allContainers) {
+        const cname = ctr.name ?? 'unnamed-container';
+        // Running as root
+        if (!ctr.securityContext?.runAsNonRoot) {
+            issues.push({
+                type: 'high',
+                category: 'permissions',
+                title: 'Container may run as root',
+                description: `Container "${cname}" in ${manifestName} does not set runAsNonRoot: true`,
+                recommendation: 'Add securityContext.runAsNonRoot: true and set runAsUser > 0',
+                evidence: relPath,
+            });
+        }
+        // Privileged mode
+        if (ctr.securityContext?.privileged) {
+            issues.push({
+                type: 'high',
+                category: 'permissions',
+                title: 'Privileged container',
+                description: `Container "${cname}" in ${manifestName} runs in privileged mode`,
+                recommendation: 'Remove securityContext.privileged or set to false. Use capabilities instead.',
+                evidence: relPath,
+            });
+        }
+        // No resource limits
+        if (!ctr.resources?.limits) {
+            issues.push({
+                type: 'medium',
+                category: 'config',
+                title: 'No resource limits set',
+                description: `Container "${cname}" in ${manifestName} has no resource limits`,
+                recommendation: 'Set resources.limits.cpu and resources.limits.memory to prevent resource exhaustion',
+                evidence: relPath,
+            });
+        }
+        // No resource requests
+        if (!ctr.resources?.requests) {
+            issues.push({
+                type: 'low',
+                category: 'config',
+                title: 'No resource requests set',
+                description: `Container "${cname}" in ${manifestName} has no resource requests`,
+                recommendation: 'Set resources.requests for predictable scheduling',
+                evidence: relPath,
+            });
+        }
+        // HostPath volumes
+        if (Array.isArray(ctr.volumeMounts)) {
+            for (const vm of ctr.volumeMounts) {
+                if (vm.mountPath && vm.mountPath.startsWith('/host')) {
+                    issues.push({
+                        type: 'high',
+                        category: 'filesystem',
+                        title: 'Suspicious host mount path',
+                        description: `Container "${cname}" mounts at ${vm.mountPath} — likely a hostPath volume`,
+                        recommendation: 'Avoid mounting host paths. Use PVCs or emptyDir instead.',
+                        evidence: relPath,
+                    });
+                }
+            }
+        }
+        // Using :latest tag
+        const image = ctr.image ?? '';
+        if (image.includes(':latest') || (!image.includes(':') && image.includes('/'))) {
+            issues.push({
+                type: 'medium',
+                category: 'supply-chain',
+                title: 'Using latest or untagged image',
+                description: `Container "${cname}" uses image "${image}" without a pinned tag`,
+                recommendation: 'Pin image tags to specific versions (e.g., nginx:1.25.3) for reproducible builds',
+                evidence: relPath,
+            });
+        }
+        // No liveness/readiness probes
+        if (!ctr.livenessProbe) {
+            issues.push({
+                type: 'low',
+                category: 'config',
+                title: 'No liveness probe',
+                description: `Container "${cname}" has no liveness probe`,
+                recommendation: 'Add a livenessProbe so K8s can restart unhealthy containers',
+                evidence: relPath,
+            });
+        }
+        if (!ctr.readinessProbe) {
+            issues.push({
+                type: 'low',
+                category: 'config',
+                title: 'No readiness probe',
+                description: `Container "${cname}" has no readiness probe`,
+                recommendation: 'Add a readinessProbe to control traffic routing',
+                evidence: relPath,
+            });
+        }
+        // Environment variables with potential secrets
+        if (Array.isArray(ctr.env)) {
+            for (const env of ctr.env) {
+                const name = (env.name ?? '').toLowerCase();
+                if (name.includes('password') || name.includes('secret') || name.includes('token') || name.includes('key')) {
+                    if (env.value && !env.valueFrom) {
+                        issues.push({
+                            type: 'high',
+                            category: 'config',
+                            title: 'Hardcoded secret in env var',
+                            description: `Container "${cname}" has "${env.name}" set as plaintext in the manifest`,
+                            recommendation: 'Use Secrets or external secret managers instead of plaintext env vars',
+                            evidence: `${relPath} → env.${env.name}`,
+                        });
+                    }
+                }
+            }
+        }
+    }
+    // hostPath volumes at pod level
+    if (Array.isArray(podSpec.volumes)) {
+        for (const vol of podSpec.volumes) {
+            if (vol.hostPath) {
+                issues.push({
+                    type: 'high',
+                    category: 'filesystem',
+                    title: 'hostPath volume mounted',
+                    description: `Pod ${manifestName} uses hostPath volume "${vol.name}" → ${vol.hostPath.path}`,
+                    recommendation: 'Avoid hostPath volumes. They expose the node filesystem to the pod.',
+                    evidence: relPath,
+                });
+            }
+        }
+    }
+    // hostNetwork
+    if (podSpec.hostNetwork) {
+        issues.push({
+            type: 'high',
+            category: 'network',
+            title: 'hostNetwork enabled',
+            description: `Pod ${manifestName} uses hostNetwork: true`,
+            recommendation: 'Only use hostNetwork when absolutely necessary. It gives the pod access to the node network.',
+            evidence: relPath,
+        });
+    }
+    // hostPID / hostIPC
+    if (podSpec.hostPID) {
+        issues.push({
+            type: 'medium',
+            category: 'permissions',
+            title: 'hostPID enabled',
+            description: `Pod ${manifestName} uses hostPID: true`,
+            recommendation: 'Avoid hostPID unless needed for debugging.',
+            evidence: relPath,
+        });
+    }
+    if (podSpec.hostIPC) {
+        issues.push({
+            type: 'medium',
+            category: 'permissions',
+            title: 'hostIPC enabled',
+            description: `Pod ${manifestName} uses hostIPC: true`,
+            recommendation: 'Avoid hostIPC unless shared memory is required.',
+            evidence: relPath,
+        });
+    }
+    return issues;
+}
+function checkService(manifest, relPath) {
+    const issues = [];
+    const spec = manifest.spec;
+    if (!spec)
+        return issues;
+    const name = manifest.metadata?.name ?? 'unnamed-service';
+    // LoadBalancer exposing internally
+    if (spec.type === 'LoadBalancer') {
+        issues.push({
+            type: 'medium',
+            category: 'network',
+            title: 'Service exposed via LoadBalancer',
+            description: `Service "${name}" is a LoadBalancer — it will be externally accessible`,
+            recommendation: 'Use ClusterIP + Ingress for internal services. Only use LoadBalancer for public endpoints.',
+            evidence: relPath,
+        });
+    }
+    // NodePort
+    if (spec.type === 'NodePort') {
+        issues.push({
+            type: 'low',
+            category: 'network',
+            title: 'Service uses NodePort',
+            description: `Service "${name}" uses NodePort — accessible on all cluster nodes`,
+            recommendation: 'Prefer Ingress over NodePort for production workloads.',
+            evidence: relPath,
+        });
+    }
+    return issues;
+}
+function checkManifest(doc, relPath) {
+    const issues = [];
+    if (!doc || typeof doc !== 'object' || !doc.kind)
+        return issues;
+    const manifestName = doc.metadata?.name ?? 'unnamed';
+    const podSpec = extractPodSpec(doc);
+    if (podSpec) {
+        issues.push(...checkPodSpec(podSpec, relPath, manifestName));
+    }
+    if ((doc.kind ?? '').toLowerCase() === 'service') {
+        issues.push(...checkService(doc, relPath));
+    }
+    return issues;
+}
+// ---- File discovery ----
+async function findYamlFiles(targetPath) {
+    const files = [];
+    if (!(await fs_extra_1.default.pathExists(targetPath)))
+        return files;
+    const stat = await fs_extra_1.default.stat(targetPath);
+    if (stat.isFile()) {
+        const ext = path_1.default.extname(targetPath).toLowerCase();
+        if (['.yaml', '.yml'].includes(ext))
+            files.push(targetPath);
+        return files;
+    }
+    async function walk(dir) {
+        const entries = await fs_extra_1.default.readdir(dir, { withFileTypes: true });
+        for (const entry of entries) {
+            if (entry.name.startsWith('.') || entry.name === 'node_modules')
+                continue;
+            const full = path_1.default.join(dir, entry.name);
+            if (entry.isDirectory()) {
+                await walk(full);
+            }
+            else {
+                const ext = path_1.default.extname(entry.name).toLowerCase();
+                if (['.yaml', '.yml'].includes(ext)) {
+                    files.push(full);
+                }
+            }
+        }
+    }
+    await walk(targetPath);
+    return files;
+}
+// ---- Public API ----
+async function scanK8s(targetPath, options = {}) {
+    const issues = [];
+    let filesScanned = 0;
+    try {
+        const yamlFiles = await findYamlFiles(targetPath);
+        for (const fp of yamlFiles) {
+            const content = await fs_extra_1.default.readFile(fp, 'utf8');
+            const rel = path_1.default.relative(targetPath, fp);
+            // YAML may contain multiple docs separated by ---
+            const docs = js_yaml_1.default.loadAll(content);
+            let hadK8sManifest = false;
+            for (const doc of docs) {
+                if (!doc || typeof doc !== 'object' || !doc.kind)
+                    continue;
+                hadK8sManifest = true;
+                issues.push(...checkManifest(doc, rel));
+            }
+            if (hadK8sManifest)
+                filesScanned++;
+        }
+    }
+    catch (err) {
+        logger_1.logger.warn('K8s scan error:', err);
+        issues.push({
+            type: 'medium',
+            category: 'config',
+            title: 'K8s Scan Error',
+            description: `Could not complete K8s scan: ${err instanceof Error ? err.message : String(err)}`,
+            recommendation: 'Ensure the target path is accessible and YAML is valid',
+        });
+    }
+    const high = issues.filter(i => i.type === 'high').length;
+    const medium = issues.filter(i => i.type === 'medium').length;
+    const low = issues.filter(i => i.type === 'low').length;
+    const score = Math.max(0, 100 - high * 25 - medium * 10 - low * 3);
+    return {
+        scanType: 'server',
+        timestamp: new Date().toISOString(),
+        target: targetPath,
+        issues,
+        score,
+        summary: {
+            configFilesFound: filesScanned,
+            highRiskIssues: high,
+            mediumRiskIssues: medium,
+            lowRiskIssues: low,
+        },
+    };
+}
+//# sourceMappingURL=k8s-scanner.js.map

package/dist/scanners/k8s-scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"k8s-scanner.js","sourceRoot":"","sources":["../../src/scanners/k8s-scanner.ts"],"names":[],"mappings":";;;;;AAmTA,0BAqDC;AAxWD,wDAA0B;AAC1B,gDAAwB;AACxB,sDAA2B;AAC3B,4CAAyC;AAyBzC,SAAS,cAAc,CAAC,QAAqB;IAC3C,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAChD,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,QAAQ,CAAC,IAAI,CAAC;IACzC,IAAI,CAAC,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnF,OAAO,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,IAAI,IAAI,CAAC;IAC/C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,OAAY,EAAE,OAAe,EAAE,YAAoB;IACvE,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,IAAI,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC;IAE5B,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;IAC5C,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC;IACpD,MAAM,aAAa,GAAG,CAAC,GAAG,UAAU,EAAE,GAAG,cAAc,CAAC,CAAC;IAEzD,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,IAAI,mBAAmB,CAAC;QAE9C,kBAAkB;QAClB,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,YAAY,EAAE,CAAC;YACvC,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,MAAM;gBACZ,QAAQ,EAAE,aAAa;gBACvB,KAAK,EAAE,2BAA2B;gBAClC,WAAW,EAAE,cAAc,KAAK,QAAQ,YAAY,kCAAkC;gBACtF,cAAc,EAAE,8DAA8D;gBAC9E,QAAQ,EAAE,OAAO;aAClB,CAAC,CAAC;QACL,CAAC;QAED,kBAAkB;QAClB,IAAI,GAAG,CAAC,eAAe,EAAE,UAAU,EAAE,CAAC;YACpC,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,MAAM;gBACZ,QAAQ,EAAE,aAAa;gBACvB,KAAK,EAAE,sBAAsB;gBAC7B,WAAW,EAAE,cAAc,KAAK,QAAQ,YAAY,0BAA0B;gBAC9E,cAAc,EAAE,8EAA8E;gBAC9F,QAAQ,EAAE,OAAO;aAClB,CAAC,CAAC;QACL,CAAC;QAED,qBAAqB;QACrB,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,QAAQ;gBAClB,KAAK,EAAE,wBAAwB;gBAC/B,WAAW,EAAE,cAAc,KAAK,QAAQ,YAAY,yBAAyB;gBAC7E,cAAc,EAAE,qFAAqF;gBACrG,QAAQ,EAAE,OAAO;aAClB,CAAC,CAAC;QACL,CAAC;QAED,uBAAuB;QACvB,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,KAAK;gBACX,QAAQ,EAAE,QAAQ;gBAClB,KAAK,EAAE,0BAA0B;gBACjC,WAAW,EAAE,cAAc,KAAK,QAAQ,YAAY,2BAA2B;gBAC/E,cAAc,EAAE,mDAAmD;gBACnE,QAAQ,EAAE,OAAO;aAClB,CAAC,CAAC;QACL,CAAC;QAED,mBAAmB;QACnB,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YACpC,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;gBAClC,IAAI,EAAE,CAAC,SAAS,IAAI,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;oBACrD,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,MAAM;wBACZ,QAAQ,EAAE,YAAY;wBACtB,KAAK,EAAE,4BAA4B;wBACnC,WAAW,EAAE,cAAc,KAAK,eAAe,EAAE,CAAC,SAAS,6BAA6B;wBACxF,cAAc,EAAE,0DAA0D;wBAC1E,QAAQ,EAAE,OAAO;qBAClB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,oBAAoB;QACpB,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;QAC9B,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC/E,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,cAAc;gBACxB,KAAK,EAAE,gCAAgC;gBACvC,WAAW,EAAE,cAAc,KAAK,iBAAiB,KAAK,wBAAwB;gBAC9E,cAAc,EAAE,kFAAkF;gBAClG,QAAQ,EAAE,OAAO;aAClB,CAAC,CAAC;QACL,CAAC;QAED,+BAA+B;QAC/B,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,KAAK;gBACX,QAAQ,EAAE,QAAQ;gBAClB,KAAK,EAAE,mBAAmB;gBAC1B,WAAW,EAAE,cAAc,KAAK,yBAAyB;gBACzD,cAAc,EAAE,6DAA6D;gBAC7E,QAAQ,EAAE,OAAO;aAClB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,KAAK;gBACX,QAAQ,EAAE,QAAQ;gBAClB,KAAK,EAAE,oBAAoB;gBAC3B,WAAW,EAAE,cAAc,KAAK,0BAA0B;gBAC1D,cAAc,EAAE,iDAAiD;gBACjE,QAAQ,EAAE,OAAO;aAClB,CAAC,CAAC;QACL,CAAC;QAED,+CAA+C;QAC/C,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC;gBAC1B,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;gBAC5C,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC3G,IAAI,GAAG,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;wBAChC,MAAM,CAAC,IAAI,CAAC;4BACV,IAAI,EAAE,MAAM;4BACZ,QAAQ,EAAE,QAAQ;4BAClB,KAAK,EAAE,6BAA6B;4BACpC,WAAW,EAAE,cAAc,KAAK,UAAU,GAAG,CAAC,IAAI,oCAAoC;4BACtF,cAAc,EAAE,uEAAuE;4BACvF,QAAQ,EAAE,GAAG,OAAO,UAAU,GAAG,CAAC,IAAI,EAAE;yBACzC,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,gCAAgC;IAChC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YAClC,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,MAAM;oBACZ,QAAQ,EAAE,YAAY;oBACtB,KAAK,EAAE,yBAAyB;oBAChC,WAAW,EAAE,OAAO,YAAY,0BAA0B,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE;oBAC5F,cAAc,EAAE,qEAAqE;oBACrF,QAAQ,EAAE,OAAO;iBAClB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,cAAc;IACd,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,SAAS;YACnB,KAAK,EAAE,qBAAqB;YAC5B,WAAW,EAAE,OAAO,YAAY,yBAAyB;YACzD,cAAc,EAAE,8FAA8F;YAC9G,QAAQ,EAAE,OAAO;SAClB,CAAC,CAAC;IACL,CAAC;IAED,oBAAoB;IACpB,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE,aAAa;YACvB,KAAK,EAAE,iBAAiB;YACxB,WAAW,EAAE,OAAO,YAAY,qBAAqB;YACrD,cAAc,EAAE,4CAA4C;YAC5D,QAAQ,EAAE,OAAO;SAClB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE,aAAa;YACvB,KAAK,EAAE,iBAAiB;YACxB,WAAW,EAAE,OAAO,YAAY,qBAAqB;YACrD,cAAc,EAAE,iDAAiD;YACjE,QAAQ,EAAE,OAAO;SAClB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,YAAY,CAAC,QAAqB,EAAE,OAAe;IAC1D,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC3B,IAAI,CAAC,IAAI;QAAE,OAAO,MAAM,CAAC;IAEzB,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,EAAE,IAAI,IAAI,iBAAiB,CAAC;IAE1D,mCAAmC;IACnC,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE,SAAS;YACnB,KAAK,EAAE,kCAAkC;YACzC,WAAW,EAAE,YAAY,IAAI,wDAAwD;YACrF,cAAc,EAAE,4FAA4F;YAC5G,QAAQ,EAAE,OAAO;SAClB,CAAC,CAAC;IACL,CAAC;IAED,WAAW;IACX,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,KAAK;YACX,QAAQ,EAAE,SAAS;YACnB,KAAK,EAAE,uBAAuB;YAC9B,WAAW,EAAE,YAAY,IAAI,mDAAmD;YAChF,cAAc,EAAE,wDAAwD;YACxE,QAAQ,EAAE,OAAO;SAClB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,GAAQ,EAAE,OAAe;IAC9C,MAAM,MAAM,GAAoB,EAAE,CAAC;IAEnC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,IAAI;QAAE,OAAO,MAAM,CAAC;IAEhE,MAAM,YAAY,GAAG,GAAG,CAAC,QAAQ,EAAE,IAAI,IAAI,SAAS,CAAC;IACrD,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,SAAS,EAAE,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,2BAA2B;AAE3B,KAAK,UAAU,aAAa,CAAC,UAAkB;IAC7C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,CAAC,CAAC,MAAM,kBAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAErD,MAAM,IAAI,GAAG,MAAM,kBAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACvC,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QAClB,MAAM,GAAG,GAAG,cAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;QACnD,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC5D,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,UAAU,IAAI,CAAC,GAAW;QAC7B,MAAM,OAAO,GAAG,MAAM,kBAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc;gBAAE,SAAS;YAC1E,MAAM,IAAI,GAAG,cAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,GAAG,cAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;gBACnD,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBACpC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACnB,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC;IACvB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,uBAAuB;AAEhB,KAAK,UAAU,OAAO,CAAC,UAAkB,EAAE,UAA0B,EAAE;IAC5E,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,CAAC;QAElD,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,MAAM,kBAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAC9C,MAAM,GAAG,GAAG,cAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YAE1C,kDAAkD;YAClD,MAAM,IAAI,GAAG,iBAAI,CAAC,OAAO,CAAC,OAAO,CAAU,CAAC;YAC5C,IAAI,cAAc,GAAG,KAAK,CAAC;YAE3B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,IAAI;oBAAE,SAAS;gBAC3D,cAAc,GAAG,IAAI,CAAC;gBACtB,MAAM,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;YAC1C,CAAC;YAED,IAAI,cAAc;gBAAE,YAAY,EAAE,CAAC;QACrC,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,eAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE,QAAQ;YAClB,KAAK,EAAE,gBAAgB;YACvB,WAAW,EAAE,gCAAgC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;YAC/F,cAAc,EAAE,wDAAwD;SACzE,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IAC1D,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;IAC9D,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,MAAM,CAAC;IAExD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,IAAI,GAAG,EAAE,GAAG,MAAM,GAAG,EAAE,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC;IAEnE,OAAO;QACL,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,MAAM,EAAE,UAAU;QAClB,MAAM;QACN,KAAK;QACL,OAAO,EAAE;YACP,gBAAgB,EAAE,YAAY;YAC9B,cAAc,EAAE,IAAI;YACpB,gBAAgB,EAAE,MAAM;YACxB,aAAa,EAAE,GAAG;SACnB;KACF,CAAC;AACJ,CAAC"}

package/dist/scanners/server-scanner.d.ts

@@ -0,0 +1,13 @@
+import { SecurityResult } from '../types/security-result';
+export interface ScanOptions {
+    scanDepth: number;
+    vulnerabilityDatabase: string;
+    trustWeight: {
+        stars: number;
+        tests: number;
+        ci: number;
+        age: number;
+    };
+}
+export declare function checkServer(repository: string, options: ScanOptions, verbose?: boolean): Promise<SecurityResult>;
+//# sourceMappingURL=server-scanner.d.ts.map

package/dist/scanners/server-scanner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-scanner.d.ts","sourceRoot":"","sources":["../../src/scanners/server-scanner.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,cAAc,EAAiB,MAAM,0BAA0B,CAAC;AAczE,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,WAAW,EAAE;QACX,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,EAAE,EAAE,MAAM,CAAC;QACX,GAAG,EAAE,MAAM,CAAC;KACb,CAAC;CACH;AAED,wBAAsB,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,UAAQ,GAAG,OAAO,CAAC,cAAc,CAAC,CA8DpH"}