@wirecatch/cli 0.1.0 → 0.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +15 -1
- package/dist/wirecatch.mjs +1347 -668
- package/package.json +6 -1
package/README.md
CHANGED
|
@@ -10,10 +10,24 @@ npx @wirecatch/cli run my-api.collection.json -e staging.environment.json -r cli
|
|
|
10
10
|
|
|
11
11
|
- Exit code `0` when everything passed, `1` when a request or test failed, `2` when the input could not be used.
|
|
12
12
|
- Reporters: `cli`, `json`, `junit`.
|
|
13
|
+
- `--parallel <n>` runs up to n iterations at once (requests inside each stay in order).
|
|
13
14
|
- Scripts run in a sandbox with no access to your files, network or environment variables except through the `pm` API.
|
|
14
15
|
- File uploads named in a collection are read only from `--working-dir` (default: the current folder).
|
|
15
16
|
|
|
16
|
-
|
|
17
|
+
- Every answer is checked for common security mistakes (headers, CORS, cookies, leaked errors and secrets). Add `--fail-on-security high` to fail the run on them.
|
|
18
|
+
|
|
19
|
+
## Active security checks (Team plan)
|
|
20
|
+
|
|
21
|
+
```sh
|
|
22
|
+
WIRECATCH_ORG_KEY=wco_... npx @wirecatch/cli scan https://api.example.com/v1/orders -H "Authorization: Bearer $TOKEN" --fail-on medium
|
|
23
|
+
```
|
|
24
|
+
|
|
25
|
+
Sends about ten altered copies of the request (no credentials, a made-up token, another website's origin,
|
|
26
|
+
forwarded headers, TRACE, marked input) and reports weaknesses with fixes. Only for sites your organization
|
|
27
|
+
has verified in Wirecatch (checked by the Wirecatch server), or localhost (checked from your machine).
|
|
28
|
+
Requests that change data are only resent with `--allow-unsafe`. Writes JUnit with `-r junit`.
|
|
29
|
+
|
|
30
|
+
Run `wirecatch --help` and `wirecatch scan --help` for every option. Needs Node.js 20 or newer. The package is a single file with no dependencies.
|
|
17
31
|
|
|
18
32
|
More at https://wirecatch.com
|
|
19
33
|
|