supasec 1.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (65) hide show
  1. package/.env +1 -0
  2. package/LICENSE +21 -0
  3. package/README.md +276 -0
  4. package/dist/cli.d.ts +7 -0
  5. package/dist/cli.d.ts.map +1 -0
  6. package/dist/cli.js +30 -0
  7. package/dist/cli.js.map +1 -0
  8. package/dist/commands/index.d.ts +6 -0
  9. package/dist/commands/index.d.ts.map +1 -0
  10. package/dist/commands/index.js +22 -0
  11. package/dist/commands/index.js.map +1 -0
  12. package/dist/commands/scan.d.ts +23 -0
  13. package/dist/commands/scan.d.ts.map +1 -0
  14. package/dist/commands/scan.js +235 -0
  15. package/dist/commands/scan.js.map +1 -0
  16. package/dist/index.d.ts +10 -0
  17. package/dist/index.d.ts.map +1 -0
  18. package/dist/index.js +31 -0
  19. package/dist/index.js.map +1 -0
  20. package/dist/models/finding.d.ts +88 -0
  21. package/dist/models/finding.d.ts.map +1 -0
  22. package/dist/models/finding.js +80 -0
  23. package/dist/models/finding.js.map +1 -0
  24. package/dist/models/index.d.ts +7 -0
  25. package/dist/models/index.d.ts.map +1 -0
  26. package/dist/models/index.js +23 -0
  27. package/dist/models/index.js.map +1 -0
  28. package/dist/models/scan-result.d.ts +103 -0
  29. package/dist/models/scan-result.d.ts.map +1 -0
  30. package/dist/models/scan-result.js +168 -0
  31. package/dist/models/scan-result.js.map +1 -0
  32. package/dist/reporters/index.d.ts +6 -0
  33. package/dist/reporters/index.d.ts.map +1 -0
  34. package/dist/reporters/index.js +22 -0
  35. package/dist/reporters/index.js.map +1 -0
  36. package/dist/reporters/terminal.d.ts +20 -0
  37. package/dist/reporters/terminal.d.ts.map +1 -0
  38. package/dist/reporters/terminal.js +346 -0
  39. package/dist/reporters/terminal.js.map +1 -0
  40. package/dist/scanners/index.d.ts +7 -0
  41. package/dist/scanners/index.d.ts.map +1 -0
  42. package/dist/scanners/index.js +23 -0
  43. package/dist/scanners/index.js.map +1 -0
  44. package/dist/scanners/rls/analyzer.d.ts +44 -0
  45. package/dist/scanners/rls/analyzer.d.ts.map +1 -0
  46. package/dist/scanners/rls/analyzer.js +519 -0
  47. package/dist/scanners/rls/analyzer.js.map +1 -0
  48. package/dist/scanners/rls/index.d.ts +6 -0
  49. package/dist/scanners/rls/index.d.ts.map +1 -0
  50. package/dist/scanners/rls/index.js +22 -0
  51. package/dist/scanners/rls/index.js.map +1 -0
  52. package/dist/scanners/secrets/detector.d.ts +32 -0
  53. package/dist/scanners/secrets/detector.d.ts.map +1 -0
  54. package/dist/scanners/secrets/detector.js +251 -0
  55. package/dist/scanners/secrets/detector.js.map +1 -0
  56. package/dist/scanners/secrets/index.d.ts +7 -0
  57. package/dist/scanners/secrets/index.d.ts.map +1 -0
  58. package/dist/scanners/secrets/index.js +23 -0
  59. package/dist/scanners/secrets/index.js.map +1 -0
  60. package/dist/scanners/secrets/patterns.d.ts +57 -0
  61. package/dist/scanners/secrets/patterns.d.ts.map +1 -0
  62. package/dist/scanners/secrets/patterns.js +285 -0
  63. package/dist/scanners/secrets/patterns.js.map +1 -0
  64. package/npm-publishing-guide.md +38 -0
  65. package/package.json +69 -0
@@ -0,0 +1,38 @@
1
+ Using authentication tokens (CI/CD)
2
+ Generate token at https://www.npmjs.com/settings/~/tokens → "Create Token"
3
+
4
+ Select "Automation" or "Publish" type
5
+ Add to .npmrc (local or CI):
6
+
7
+ //registry.npmjs.org/:_authToken=YOUR_TOKEN_HERE
8
+ Or set as environment variable:
9
+
10
+ npm set //registry.npmjs.org/:_authToken $NPM_TOKEN
11
+ For GitHub Actions, add secret and use:
12
+
13
+ - run: npm publish
14
+ env:
15
+ NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
16
+ Before publishing, update version in package.json and run npm run build.
17
+
18
+
19
+ Option 1: Local Publishing (One-time)
20
+ Set token globally:
21
+
22
+ npm config set //registry.npmjs.org/:_authToken npm_TmTE
23
+ Verify it worked:
24
+
25
+ npm config get //registry.npmjs.org/:_authToken
26
+ (Should show your token)
27
+
28
+ Update version in package.json:
29
+
30
+ npm version minor
31
+ (Or manually edit "version": "1.0.1")
32
+
33
+ Build:
34
+
35
+ npm run build
36
+ Publish:
37
+
38
+ npm publish
package/package.json ADDED
@@ -0,0 +1,69 @@
1
+ {
2
+ "name": "supasec",
3
+ "version": "1.0.0",
4
+ "description": "A free, open-source CLI tool for comprehensive Supabase security auditing",
5
+ "main": "dist/index.js",
6
+ "types": "dist/index.d.ts",
7
+ "bin": {
8
+ "supasec": "dist/cli.js"
9
+ },
10
+ "scripts": {
11
+ "build": "tsc",
12
+ "dev": "tsc --watch",
13
+ "start": "node dist/cli.js",
14
+ "lint": "eslint src/**/*.ts",
15
+ "test": "jest",
16
+ "prepare": "npm run build"
17
+ },
18
+ "keywords": [
19
+ "supabase",
20
+ "security",
21
+ "audit",
22
+ "cli",
23
+ "rls",
24
+ "scanner",
25
+ "vulnerability",
26
+ "pentesting"
27
+ ],
28
+ "author": "SupaSec Team",
29
+ "license": "MIT",
30
+ "repository": {
31
+ "type": "git",
32
+ "url": "git+https://github.com/yourusername/supasec.git"
33
+ },
34
+ "bugs": {
35
+ "url": "https://github.com/yourusername/supasec/issues"
36
+ },
37
+ "homepage": "https://github.com/yourusername/supasec#readme",
38
+ "engines": {
39
+ "node": ">=18.0.0"
40
+ },
41
+ "dependencies": {
42
+ "@supabase/supabase-js": "^2.38.0",
43
+ "axios": "^1.6.0",
44
+ "boxen": "^7.1.1",
45
+ "chalk": "^4.1.2",
46
+ "cheerio": "^1.0.0-rc.12",
47
+ "cli-table3": "^0.6.3",
48
+ "commander": "^11.1.0",
49
+ "enquirer": "^2.4.1",
50
+ "ora": "^7.0.1",
51
+ "puppeteer": "^21.5.0"
52
+ },
53
+ "devDependencies": {
54
+ "@humanwhocodes/config-array": "^0.13.0",
55
+ "@humanwhocodes/object-schema": "^2.0.3",
56
+ "@types/jest": "^29.5.0",
57
+ "@types/json-schema": "^7.0.15",
58
+ "@types/node": "^20.8.0",
59
+ "@types/phoenix": "^1.6.7",
60
+ "@typescript-eslint/eslint-plugin": "^8.54.0",
61
+ "@typescript-eslint/parser": "^8.54.0",
62
+ "eslint": "^9.39.2",
63
+ "glob": "^13.0.0",
64
+ "jest": "^29.7.0",
65
+ "rimraf": "^6.1.2",
66
+ "ts-jest": "^29.1.0",
67
+ "typescript": "^5.2.0"
68
+ }
69
+ }