scanrail 0.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +52 -0
- package/bin/scanrail.js +11 -0
- package/package.json +40 -0
package/README.md
ADDED
|
@@ -0,0 +1,52 @@
|
|
|
1
|
+
# Scanrail
|
|
2
|
+
|
|
3
|
+
[](https://www.npmjs.com/package/scanrail)
|
|
4
|
+
[](https://github.com/raeseoklee/scanrail/actions/workflows/ci.yml)
|
|
5
|
+
[](https://github.com/raeseoklee/scanrail/blob/main/LICENSE)
|
|
6
|
+
|
|
7
|
+
Developer-first security scan orchestration from one CLI.
|
|
8
|
+
|
|
9
|
+
This package installs the `scanrail` command. It delegates to `@scanrail/cli`, which installs the matching platform-specific Go binary package for macOS, Windows, or Linux.
|
|
10
|
+
|
|
11
|
+
## Install
|
|
12
|
+
|
|
13
|
+
```bash
|
|
14
|
+
npm install -g scanrail
|
|
15
|
+
scanrail doctor
|
|
16
|
+
```
|
|
17
|
+
|
|
18
|
+
You can also run it without a global install:
|
|
19
|
+
|
|
20
|
+
```bash
|
|
21
|
+
npx scanrail doctor
|
|
22
|
+
```
|
|
23
|
+
|
|
24
|
+
## First Scan
|
|
25
|
+
|
|
26
|
+
```bash
|
|
27
|
+
scanrail init --non-interactive --project-name demo --target https://example.com
|
|
28
|
+
scanrail run --only headers
|
|
29
|
+
```
|
|
30
|
+
|
|
31
|
+
The first release includes the CLI scaffold, config generation, workspace setup, JSON/HTML reporting, and a native security headers scanner. Docker-backed adapters for Gitleaks, Trivy, and Semgrep are planned next.
|
|
32
|
+
|
|
33
|
+
## Package Layout
|
|
34
|
+
|
|
35
|
+
`scanrail` is the recommended npm entrypoint. It depends on `@scanrail/cli`, which installs one optional platform package:
|
|
36
|
+
|
|
37
|
+
- `@scanrail/cli-darwin-arm64`
|
|
38
|
+
- `@scanrail/cli-darwin-x64`
|
|
39
|
+
- `@scanrail/cli-win32-x64`
|
|
40
|
+
- `@scanrail/cli-win32-arm64`
|
|
41
|
+
- `@scanrail/cli-linux-x64`
|
|
42
|
+
- `@scanrail/cli-linux-arm64`
|
|
43
|
+
|
|
44
|
+
## Links
|
|
45
|
+
|
|
46
|
+
- Repository: https://github.com/raeseoklee/scanrail
|
|
47
|
+
- Documentation: https://github.com/raeseoklee/scanrail#readme
|
|
48
|
+
- Issues: https://github.com/raeseoklee/scanrail/issues
|
|
49
|
+
|
|
50
|
+
## License
|
|
51
|
+
|
|
52
|
+
Apache-2.0
|
package/bin/scanrail.js
ADDED
|
@@ -0,0 +1,11 @@
|
|
|
1
|
+
#!/usr/bin/env node
|
|
2
|
+
try {
|
|
3
|
+
require("@scanrail/cli/bin/scanrail.js");
|
|
4
|
+
} catch (error) {
|
|
5
|
+
if (error && error.code === "MODULE_NOT_FOUND") {
|
|
6
|
+
console.error("Missing dependency: @scanrail/cli");
|
|
7
|
+
console.error("Try reinstalling with: npm install -g scanrail");
|
|
8
|
+
process.exit(1);
|
|
9
|
+
}
|
|
10
|
+
throw error;
|
|
11
|
+
}
|
package/package.json
ADDED
|
@@ -0,0 +1,40 @@
|
|
|
1
|
+
{
|
|
2
|
+
"name": "scanrail",
|
|
3
|
+
"version": "0.1.0",
|
|
4
|
+
"description": "Developer-first security scan orchestrator",
|
|
5
|
+
"license": "Apache-2.0",
|
|
6
|
+
"repository": {
|
|
7
|
+
"type": "git",
|
|
8
|
+
"url": "git+https://github.com/raeseoklee/scanrail.git",
|
|
9
|
+
"directory": "packages/npm/scanrail"
|
|
10
|
+
},
|
|
11
|
+
"bugs": {
|
|
12
|
+
"url": "https://github.com/raeseoklee/scanrail/issues"
|
|
13
|
+
},
|
|
14
|
+
"homepage": "https://github.com/raeseoklee/scanrail#readme",
|
|
15
|
+
"bin": {
|
|
16
|
+
"scanrail": "bin/scanrail.js"
|
|
17
|
+
},
|
|
18
|
+
"files": [
|
|
19
|
+
"bin/scanrail.js",
|
|
20
|
+
"README.md"
|
|
21
|
+
],
|
|
22
|
+
"dependencies": {
|
|
23
|
+
"@scanrail/cli": "0.1.0"
|
|
24
|
+
},
|
|
25
|
+
"publishConfig": {
|
|
26
|
+
"access": "public"
|
|
27
|
+
},
|
|
28
|
+
"keywords": [
|
|
29
|
+
"security",
|
|
30
|
+
"security-scanner",
|
|
31
|
+
"devsecops",
|
|
32
|
+
"sast",
|
|
33
|
+
"dast",
|
|
34
|
+
"semgrep",
|
|
35
|
+
"trivy",
|
|
36
|
+
"gitleaks",
|
|
37
|
+
"owasp",
|
|
38
|
+
"cli"
|
|
39
|
+
]
|
|
40
|
+
}
|