supasec 1.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.env +1 -0
- package/LICENSE +21 -0
- package/README.md +276 -0
- package/dist/cli.d.ts +7 -0
- package/dist/cli.d.ts.map +1 -0
- package/dist/cli.js +30 -0
- package/dist/cli.js.map +1 -0
- package/dist/commands/index.d.ts +6 -0
- package/dist/commands/index.d.ts.map +1 -0
- package/dist/commands/index.js +22 -0
- package/dist/commands/index.js.map +1 -0
- package/dist/commands/scan.d.ts +23 -0
- package/dist/commands/scan.d.ts.map +1 -0
- package/dist/commands/scan.js +235 -0
- package/dist/commands/scan.js.map +1 -0
- package/dist/index.d.ts +10 -0
- package/dist/index.d.ts.map +1 -0
- package/dist/index.js +31 -0
- package/dist/index.js.map +1 -0
- package/dist/models/finding.d.ts +88 -0
- package/dist/models/finding.d.ts.map +1 -0
- package/dist/models/finding.js +80 -0
- package/dist/models/finding.js.map +1 -0
- package/dist/models/index.d.ts +7 -0
- package/dist/models/index.d.ts.map +1 -0
- package/dist/models/index.js +23 -0
- package/dist/models/index.js.map +1 -0
- package/dist/models/scan-result.d.ts +103 -0
- package/dist/models/scan-result.d.ts.map +1 -0
- package/dist/models/scan-result.js +168 -0
- package/dist/models/scan-result.js.map +1 -0
- package/dist/reporters/index.d.ts +6 -0
- package/dist/reporters/index.d.ts.map +1 -0
- package/dist/reporters/index.js +22 -0
- package/dist/reporters/index.js.map +1 -0
- package/dist/reporters/terminal.d.ts +20 -0
- package/dist/reporters/terminal.d.ts.map +1 -0
- package/dist/reporters/terminal.js +346 -0
- package/dist/reporters/terminal.js.map +1 -0
- package/dist/scanners/index.d.ts +7 -0
- package/dist/scanners/index.d.ts.map +1 -0
- package/dist/scanners/index.js +23 -0
- package/dist/scanners/index.js.map +1 -0
- package/dist/scanners/rls/analyzer.d.ts +44 -0
- package/dist/scanners/rls/analyzer.d.ts.map +1 -0
- package/dist/scanners/rls/analyzer.js +519 -0
- package/dist/scanners/rls/analyzer.js.map +1 -0
- package/dist/scanners/rls/index.d.ts +6 -0
- package/dist/scanners/rls/index.d.ts.map +1 -0
- package/dist/scanners/rls/index.js +22 -0
- package/dist/scanners/rls/index.js.map +1 -0
- package/dist/scanners/secrets/detector.d.ts +32 -0
- package/dist/scanners/secrets/detector.d.ts.map +1 -0
- package/dist/scanners/secrets/detector.js +251 -0
- package/dist/scanners/secrets/detector.js.map +1 -0
- package/dist/scanners/secrets/index.d.ts +7 -0
- package/dist/scanners/secrets/index.d.ts.map +1 -0
- package/dist/scanners/secrets/index.js +23 -0
- package/dist/scanners/secrets/index.js.map +1 -0
- package/dist/scanners/secrets/patterns.d.ts +57 -0
- package/dist/scanners/secrets/patterns.d.ts.map +1 -0
- package/dist/scanners/secrets/patterns.js +285 -0
- package/dist/scanners/secrets/patterns.js.map +1 -0
- package/npm-publishing-guide.md +38 -0
- package/package.json +69 -0
|
@@ -0,0 +1,38 @@
|
|
|
1
|
+
Using authentication tokens (CI/CD)
|
|
2
|
+
Generate token at https://www.npmjs.com/settings/~/tokens → "Create Token"
|
|
3
|
+
|
|
4
|
+
Select "Automation" or "Publish" type
|
|
5
|
+
Add to .npmrc (local or CI):
|
|
6
|
+
|
|
7
|
+
//registry.npmjs.org/:_authToken=YOUR_TOKEN_HERE
|
|
8
|
+
Or set as environment variable:
|
|
9
|
+
|
|
10
|
+
npm set //registry.npmjs.org/:_authToken $NPM_TOKEN
|
|
11
|
+
For GitHub Actions, add secret and use:
|
|
12
|
+
|
|
13
|
+
- run: npm publish
|
|
14
|
+
env:
|
|
15
|
+
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
|
|
16
|
+
Before publishing, update version in package.json and run npm run build.
|
|
17
|
+
|
|
18
|
+
|
|
19
|
+
Option 1: Local Publishing (One-time)
|
|
20
|
+
Set token globally:
|
|
21
|
+
|
|
22
|
+
npm config set //registry.npmjs.org/:_authToken npm_TmTE
|
|
23
|
+
Verify it worked:
|
|
24
|
+
|
|
25
|
+
npm config get //registry.npmjs.org/:_authToken
|
|
26
|
+
(Should show your token)
|
|
27
|
+
|
|
28
|
+
Update version in package.json:
|
|
29
|
+
|
|
30
|
+
npm version minor
|
|
31
|
+
(Or manually edit "version": "1.0.1")
|
|
32
|
+
|
|
33
|
+
Build:
|
|
34
|
+
|
|
35
|
+
npm run build
|
|
36
|
+
Publish:
|
|
37
|
+
|
|
38
|
+
npm publish
|
package/package.json
ADDED
|
@@ -0,0 +1,69 @@
|
|
|
1
|
+
{
|
|
2
|
+
"name": "supasec",
|
|
3
|
+
"version": "1.0.0",
|
|
4
|
+
"description": "A free, open-source CLI tool for comprehensive Supabase security auditing",
|
|
5
|
+
"main": "dist/index.js",
|
|
6
|
+
"types": "dist/index.d.ts",
|
|
7
|
+
"bin": {
|
|
8
|
+
"supasec": "dist/cli.js"
|
|
9
|
+
},
|
|
10
|
+
"scripts": {
|
|
11
|
+
"build": "tsc",
|
|
12
|
+
"dev": "tsc --watch",
|
|
13
|
+
"start": "node dist/cli.js",
|
|
14
|
+
"lint": "eslint src/**/*.ts",
|
|
15
|
+
"test": "jest",
|
|
16
|
+
"prepare": "npm run build"
|
|
17
|
+
},
|
|
18
|
+
"keywords": [
|
|
19
|
+
"supabase",
|
|
20
|
+
"security",
|
|
21
|
+
"audit",
|
|
22
|
+
"cli",
|
|
23
|
+
"rls",
|
|
24
|
+
"scanner",
|
|
25
|
+
"vulnerability",
|
|
26
|
+
"pentesting"
|
|
27
|
+
],
|
|
28
|
+
"author": "SupaSec Team",
|
|
29
|
+
"license": "MIT",
|
|
30
|
+
"repository": {
|
|
31
|
+
"type": "git",
|
|
32
|
+
"url": "git+https://github.com/yourusername/supasec.git"
|
|
33
|
+
},
|
|
34
|
+
"bugs": {
|
|
35
|
+
"url": "https://github.com/yourusername/supasec/issues"
|
|
36
|
+
},
|
|
37
|
+
"homepage": "https://github.com/yourusername/supasec#readme",
|
|
38
|
+
"engines": {
|
|
39
|
+
"node": ">=18.0.0"
|
|
40
|
+
},
|
|
41
|
+
"dependencies": {
|
|
42
|
+
"@supabase/supabase-js": "^2.38.0",
|
|
43
|
+
"axios": "^1.6.0",
|
|
44
|
+
"boxen": "^7.1.1",
|
|
45
|
+
"chalk": "^4.1.2",
|
|
46
|
+
"cheerio": "^1.0.0-rc.12",
|
|
47
|
+
"cli-table3": "^0.6.3",
|
|
48
|
+
"commander": "^11.1.0",
|
|
49
|
+
"enquirer": "^2.4.1",
|
|
50
|
+
"ora": "^7.0.1",
|
|
51
|
+
"puppeteer": "^21.5.0"
|
|
52
|
+
},
|
|
53
|
+
"devDependencies": {
|
|
54
|
+
"@humanwhocodes/config-array": "^0.13.0",
|
|
55
|
+
"@humanwhocodes/object-schema": "^2.0.3",
|
|
56
|
+
"@types/jest": "^29.5.0",
|
|
57
|
+
"@types/json-schema": "^7.0.15",
|
|
58
|
+
"@types/node": "^20.8.0",
|
|
59
|
+
"@types/phoenix": "^1.6.7",
|
|
60
|
+
"@typescript-eslint/eslint-plugin": "^8.54.0",
|
|
61
|
+
"@typescript-eslint/parser": "^8.54.0",
|
|
62
|
+
"eslint": "^9.39.2",
|
|
63
|
+
"glob": "^13.0.0",
|
|
64
|
+
"jest": "^29.7.0",
|
|
65
|
+
"rimraf": "^6.1.2",
|
|
66
|
+
"ts-jest": "^29.1.0",
|
|
67
|
+
"typescript": "^5.2.0"
|
|
68
|
+
}
|
|
69
|
+
}
|