muaddib-scanner 2.2.19 → 2.2.22
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.gitattributes +18 -0
- package/README.fr.md +819 -825
- package/README.md +822 -822
- package/bin/muaddib.js +868 -849
- package/docker/Dockerfile +19 -18
- package/docker/sandbox-runner.sh +313 -292
- package/package.json +61 -61
- package/src/commands/evaluate.js +484 -484
- package/src/diff.js +411 -411
- package/src/hooks-init.js +264 -258
- package/src/index.js +439 -437
- package/src/ioc/scraper.js +1293 -1293
- package/src/monitor.js +1817 -1764
- package/src/sandbox.js +631 -620
- package/src/scanner/ast-detectors.js +946 -933
- package/src/scanner/ast.js +96 -96
- package/src/scanner/github-actions.js +96 -96
- package/src/scanner/module-graph.js +2 -2
- package/src/scanner/obfuscation.js +128 -128
- package/src/scanner/shell.js +48 -48
- package/src/shared/download.js +181 -171
- package/src/webhook.js +413 -353
package/docker/Dockerfile
CHANGED
|
@@ -1,19 +1,20 @@
|
|
|
1
|
-
FROM node:20-alpine
|
|
2
|
-
|
|
3
|
-
# Outils de monitoring
|
|
4
|
-
RUN apk add --no-cache strace curl tcpdump coreutils findutils jq iptables
|
|
5
|
-
|
|
6
|
-
#
|
|
7
|
-
RUN adduser -D sandboxuser
|
|
8
|
-
|
|
9
|
-
# Dossier de travail avec bonnes permissions
|
|
10
|
-
WORKDIR /sandbox
|
|
11
|
-
RUN chown sandboxuser:sandboxuser /sandbox
|
|
12
|
-
|
|
13
|
-
# Script d'analyse (sed strips Windows CRLF line endings)
|
|
14
|
-
COPY sandbox-runner.sh /sandbox/
|
|
15
|
-
RUN sed -i 's/\r$//' /sandbox/sandbox-runner.sh && chmod +x /sandbox/sandbox-runner.sh
|
|
16
|
-
|
|
17
|
-
|
|
18
|
-
|
|
1
|
+
FROM node:20-alpine
|
|
2
|
+
|
|
3
|
+
# Outils de monitoring
|
|
4
|
+
RUN apk add --no-cache strace curl tcpdump coreutils findutils jq iptables
|
|
5
|
+
|
|
6
|
+
# Non-root user for npm install (privilege drop via su in sandbox-runner.sh)
|
|
7
|
+
RUN adduser -D sandboxuser
|
|
8
|
+
|
|
9
|
+
# Dossier de travail avec bonnes permissions
|
|
10
|
+
WORKDIR /sandbox
|
|
11
|
+
RUN chown sandboxuser:sandboxuser /sandbox
|
|
12
|
+
|
|
13
|
+
# Script d'analyse (sed strips Windows CRLF line endings)
|
|
14
|
+
COPY sandbox-runner.sh /sandbox/
|
|
15
|
+
RUN sed -i 's/\r$//' /sandbox/sandbox-runner.sh && chmod +x /sandbox/sandbox-runner.sh
|
|
16
|
+
|
|
17
|
+
# Entrypoint runs as root for iptables/tcpdump/dmesg access.
|
|
18
|
+
# npm install is dropped to sandboxuser via su in sandbox-runner.sh.
|
|
19
|
+
# --security-opt no-new-privileges is set by the Docker run args in sandbox.js.
|
|
19
20
|
ENTRYPOINT ["/sandbox/sandbox-runner.sh"]
|