getdoorman 1.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +21 -0
- package/README.md +181 -0
- package/bin/doorman.js +444 -0
- package/package.json +74 -0
- package/src/ai-fixer.js +559 -0
- package/src/ast-scanner.js +434 -0
- package/src/auth.js +149 -0
- package/src/baseline.js +48 -0
- package/src/compliance.js +539 -0
- package/src/config.js +466 -0
- package/src/custom-rules.js +32 -0
- package/src/dashboard.js +202 -0
- package/src/detector.js +142 -0
- package/src/fix-engine.js +48 -0
- package/src/fix-registry-extra.js +95 -0
- package/src/fix-registry-go-rust.js +77 -0
- package/src/fix-registry-java-csharp.js +77 -0
- package/src/fix-registry-js.js +99 -0
- package/src/fix-registry-mcp-ai.js +57 -0
- package/src/fix-registry-python.js +87 -0
- package/src/fixer-ruby-php.js +608 -0
- package/src/fixer.js +2113 -0
- package/src/hooks.js +115 -0
- package/src/ignore.js +176 -0
- package/src/index.js +384 -0
- package/src/metrics.js +126 -0
- package/src/monorepo.js +65 -0
- package/src/presets.js +54 -0
- package/src/reporter.js +975 -0
- package/src/rule-worker.js +36 -0
- package/src/rules/ast-rules.js +756 -0
- package/src/rules/bugs/accessibility.js +235 -0
- package/src/rules/bugs/ai-codegen-fixable.js +172 -0
- package/src/rules/bugs/ai-codegen.js +365 -0
- package/src/rules/bugs/code-smell-bugs.js +247 -0
- package/src/rules/bugs/crypto-bugs.js +195 -0
- package/src/rules/bugs/docker-bugs.js +158 -0
- package/src/rules/bugs/general.js +361 -0
- package/src/rules/bugs/go-bugs.js +279 -0
- package/src/rules/bugs/index.js +73 -0
- package/src/rules/bugs/js-api.js +257 -0
- package/src/rules/bugs/js-array-object.js +210 -0
- package/src/rules/bugs/js-async-fixable.js +223 -0
- package/src/rules/bugs/js-async.js +211 -0
- package/src/rules/bugs/js-closure-scope.js +182 -0
- package/src/rules/bugs/js-database.js +203 -0
- package/src/rules/bugs/js-error-handling.js +148 -0
- package/src/rules/bugs/js-logic.js +261 -0
- package/src/rules/bugs/js-memory.js +214 -0
- package/src/rules/bugs/js-node.js +361 -0
- package/src/rules/bugs/js-react.js +373 -0
- package/src/rules/bugs/js-regex.js +200 -0
- package/src/rules/bugs/js-state.js +272 -0
- package/src/rules/bugs/js-type-coercion.js +318 -0
- package/src/rules/bugs/nextjs-bugs.js +242 -0
- package/src/rules/bugs/nextjs-fixable.js +120 -0
- package/src/rules/bugs/node-fixable.js +178 -0
- package/src/rules/bugs/python-advanced.js +245 -0
- package/src/rules/bugs/python-fixable.js +98 -0
- package/src/rules/bugs/python.js +284 -0
- package/src/rules/bugs/react-fixable.js +207 -0
- package/src/rules/bugs/ruby-bugs.js +182 -0
- package/src/rules/bugs/shell-bugs.js +181 -0
- package/src/rules/bugs/silent-failures.js +261 -0
- package/src/rules/bugs/ts-bugs.js +235 -0
- package/src/rules/bugs/unused-vars.js +65 -0
- package/src/rules/compliance/accessibility-ext.js +468 -0
- package/src/rules/compliance/education.js +322 -0
- package/src/rules/compliance/financial.js +421 -0
- package/src/rules/compliance/frameworks.js +507 -0
- package/src/rules/compliance/healthcare.js +520 -0
- package/src/rules/compliance/index.js +2714 -0
- package/src/rules/compliance/regional-eu.js +480 -0
- package/src/rules/compliance/regional-international.js +903 -0
- package/src/rules/cost/index.js +1993 -0
- package/src/rules/data/index.js +2503 -0
- package/src/rules/dependencies/index.js +1684 -0
- package/src/rules/deployment/index.js +2050 -0
- package/src/rules/index.js +71 -0
- package/src/rules/infrastructure/index.js +3048 -0
- package/src/rules/performance/index.js +3455 -0
- package/src/rules/quality/index.js +3175 -0
- package/src/rules/reliability/index.js +3040 -0
- package/src/rules/scope-rules.js +815 -0
- package/src/rules/security/ai-api.js +1177 -0
- package/src/rules/security/auth.js +1328 -0
- package/src/rules/security/cors.js +127 -0
- package/src/rules/security/crypto.js +527 -0
- package/src/rules/security/csharp.js +862 -0
- package/src/rules/security/csrf.js +193 -0
- package/src/rules/security/dart.js +835 -0
- package/src/rules/security/deserialization.js +291 -0
- package/src/rules/security/file-upload.js +187 -0
- package/src/rules/security/go.js +850 -0
- package/src/rules/security/headers.js +235 -0
- package/src/rules/security/index.js +65 -0
- package/src/rules/security/injection.js +1639 -0
- package/src/rules/security/mcp-server.js +71 -0
- package/src/rules/security/misconfiguration.js +660 -0
- package/src/rules/security/oauth-jwt.js +329 -0
- package/src/rules/security/path-traversal.js +295 -0
- package/src/rules/security/php.js +1054 -0
- package/src/rules/security/prototype-pollution.js +283 -0
- package/src/rules/security/rate-limiting.js +208 -0
- package/src/rules/security/ruby.js +1061 -0
- package/src/rules/security/rust.js +693 -0
- package/src/rules/security/secrets.js +747 -0
- package/src/rules/security/shell.js +647 -0
- package/src/rules/security/ssrf.js +298 -0
- package/src/rules/security/supply-chain-advanced.js +393 -0
- package/src/rules/security/supply-chain.js +734 -0
- package/src/rules/security/swift.js +835 -0
- package/src/rules/security/taint.js +27 -0
- package/src/rules/security/xss.js +520 -0
- package/src/scan-cache.js +71 -0
- package/src/scanner.js +710 -0
- package/src/scope-analyzer.js +685 -0
- package/src/share.js +88 -0
- package/src/taint.js +300 -0
- package/src/telemetry.js +183 -0
- package/src/tracer.js +190 -0
- package/src/upload.js +35 -0
- package/src/worker.js +31 -0
|
@@ -0,0 +1,71 @@
|
|
|
1
|
+
import securityRules from './security/index.js';
|
|
2
|
+
import performanceRules from './performance/index.js';
|
|
3
|
+
import reliabilityRules from './reliability/index.js';
|
|
4
|
+
import costRules from './cost/index.js';
|
|
5
|
+
import complianceRules from './compliance/index.js';
|
|
6
|
+
import dataRules from './data/index.js';
|
|
7
|
+
import dependencyRules from './dependencies/index.js';
|
|
8
|
+
import infrastructureRules from './infrastructure/index.js';
|
|
9
|
+
import qualityRules from './quality/index.js';
|
|
10
|
+
import deploymentRules from './deployment/index.js';
|
|
11
|
+
import bugRules from './bugs/index.js';
|
|
12
|
+
import astRules from './ast-rules.js';
|
|
13
|
+
import { isASTAvailable } from '../ast-scanner.js';
|
|
14
|
+
|
|
15
|
+
/**
|
|
16
|
+
* Load all rules, optionally filtered by category.
|
|
17
|
+
* When tree-sitter is available, AST-based rules are included automatically.
|
|
18
|
+
*/
|
|
19
|
+
// Language-specific rule IDs — skip these if the project doesn't have that language
|
|
20
|
+
const LANG_RULE_PREFIXES = {
|
|
21
|
+
go: ['SEC-GO-', 'BUG-GO-'],
|
|
22
|
+
rust: ['SEC-RUST-', 'BUG-RUST-'],
|
|
23
|
+
cs: ['SEC-CS-', 'BUG-CS-'],
|
|
24
|
+
swift: ['SEC-SWIFT-', 'BUG-SWIFT-'],
|
|
25
|
+
dart: ['SEC-DART-', 'BUG-DART-'],
|
|
26
|
+
shell: ['SEC-SHELL-', 'BUG-SHELL-'],
|
|
27
|
+
rb: ['SEC-RUBY-', 'BUG-RUBY-'],
|
|
28
|
+
php: ['SEC-PHP-', 'BUG-PHP-'],
|
|
29
|
+
};
|
|
30
|
+
|
|
31
|
+
export function loadRules(options = {}) {
|
|
32
|
+
const allRules = [
|
|
33
|
+
...securityRules,
|
|
34
|
+
...performanceRules,
|
|
35
|
+
...reliabilityRules,
|
|
36
|
+
...costRules,
|
|
37
|
+
...complianceRules,
|
|
38
|
+
...dataRules,
|
|
39
|
+
...dependencyRules,
|
|
40
|
+
...infrastructureRules,
|
|
41
|
+
...qualityRules,
|
|
42
|
+
...deploymentRules,
|
|
43
|
+
...bugRules,
|
|
44
|
+
];
|
|
45
|
+
|
|
46
|
+
// Include AST rules when tree-sitter is available (but NOT in worker threads)
|
|
47
|
+
if (!options.noAST && (isASTAvailable() || options.ast)) {
|
|
48
|
+
allRules.push(...astRules);
|
|
49
|
+
}
|
|
50
|
+
|
|
51
|
+
if (options.category) {
|
|
52
|
+
const categories = options.category.split(',').map(c => c.trim().toLowerCase());
|
|
53
|
+
return allRules.filter(r => categories.includes(r.category));
|
|
54
|
+
}
|
|
55
|
+
|
|
56
|
+
// Skip language-specific rules not relevant to this project
|
|
57
|
+
const detectedLangs = options._detectedLangs;
|
|
58
|
+
if (detectedLangs && detectedLangs.size > 0) {
|
|
59
|
+
return allRules.filter(r => {
|
|
60
|
+
const id = r.id || '';
|
|
61
|
+
for (const [lang, prefixes] of Object.entries(LANG_RULE_PREFIXES)) {
|
|
62
|
+
if (prefixes.some(p => id.startsWith(p)) && !detectedLangs.has(lang)) {
|
|
63
|
+
return false;
|
|
64
|
+
}
|
|
65
|
+
}
|
|
66
|
+
return true;
|
|
67
|
+
});
|
|
68
|
+
}
|
|
69
|
+
|
|
70
|
+
return allRules;
|
|
71
|
+
}
|