auditai-scan 0.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +14 -0
- package/dist/auditai-scan.mjs +1811 -0
- package/package.json +39 -0
package/README.md
ADDED
|
@@ -0,0 +1,14 @@
|
|
|
1
|
+
# auditai-scan
|
|
2
|
+
|
|
3
|
+
Deterministic security scanner for Next.js (App Router) + Supabase apps. Finds the bugs AI coding
|
|
4
|
+
tools ship most: cross-tenant reads, missing or permissive RLS, service-role misuse, unauthenticated
|
|
5
|
+
admin routes and server actions, mass assignment, roles read from user-editable metadata.
|
|
6
|
+
|
|
7
|
+
```bash
|
|
8
|
+
npx auditai-scan . # scan the current repo
|
|
9
|
+
npx auditai-scan . --migrations supabase/migrations --fail-on likely # CI gate
|
|
10
|
+
```
|
|
11
|
+
|
|
12
|
+
No account, no model call, no network. Source, rules and the eval corpus:
|
|
13
|
+
https://github.com/audit0/auditai-scanner. The hosted product that reproduces, fixes and proves
|
|
14
|
+
findings in a sandbox lives at https://auditai.sh.
|