vibe-guard 1.0.0

package/dist/rules/directory-traversal.d.ts

@@ -0,0 +1,14 @@
+import { BaseRule, FileContent, SecurityIssue } from '../types';
+export declare class DirectoryTraversalRule extends BaseRule {
+    readonly name = "directory-traversal";
+    readonly description = "Detects potential directory traversal vulnerabilities";
+    readonly severity: "high";
+    private readonly traversalPatterns;
+    private readonly safePatterns;
+    check(fileContent: FileContent): SecurityIssue[];
+    private hasSafePathHandling;
+    private isCommentOrTest;
+    private isImportStatement;
+    private isTestContext;
+}
+//# sourceMappingURL=directory-traversal.d.ts.map

package/dist/rules/directory-traversal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"directory-traversal.d.ts","sourceRoot":"","sources":["../../src/rules/directory-traversal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEhE,qBAAa,sBAAuB,SAAQ,QAAQ;IAClD,QAAQ,CAAC,IAAI,yBAAyB;IACtC,QAAQ,CAAC,WAAW,2DAA2D;IAC/E,QAAQ,CAAC,QAAQ,EAAG,MAAM,CAAU;IAEpC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CA+BhC;IAEF,OAAO,CAAC,QAAQ,CAAC,YAAY,CAe3B;IAEF,KAAK,CAAC,WAAW,EAAE,WAAW,GAAG,aAAa,EAAE;IAyChD,OAAO,CAAC,mBAAmB;IAY3B,OAAO,CAAC,eAAe;IA0BvB,OAAO,CAAC,iBAAiB;IAczB,OAAO,CAAC,aAAa;CAuBtB"}

package/dist/rules/directory-traversal.js

@@ -0,0 +1,142 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DirectoryTraversalRule = void 0;
+const types_1 = require("../types");
+class DirectoryTraversalRule extends types_1.BaseRule {
+    constructor() {
+        super(...arguments);
+        this.name = 'directory-traversal';
+        this.description = 'Detects potential directory traversal vulnerabilities';
+        this.severity = 'high';
+        this.traversalPatterns = [
+            // Direct path traversal patterns
+            { pattern: /(?:readFile|writeFile|createReadStream|createWriteStream|unlink|rmdir|mkdir|stat|access)\s*\(\s*(?:req\.|request\.|input\.|params\.|query\.)[^)]*(?!\s*(?:path\.resolve|path\.join|path\.normalize))/gi, type: 'File operation with user input' },
+            // Express static file serving
+            { pattern: /express\.static\s*\(\s*(?:req\.|request\.|input\.|params\.|query\.)/gi, type: 'Express static serving with user input' },
+            { pattern: /res\.sendFile\s*\(\s*(?:req\.|request\.|input\.|params\.|query\.)/gi, type: 'Express sendFile with user input' },
+            // Path concatenation
+            { pattern: /['"`][^'"`]*\/['"`]\s*\+\s*(?:req\.|request\.|input\.|params\.|query\.)/gi, type: 'Path concatenation with user input' },
+            { pattern: /\$\{[^}]*(?:req\.|request\.|input\.|params\.|query\.)[^}]*\}/g, type: 'Template literal path with user input' },
+            // Dangerous path patterns (but not in imports/requires)
+            { pattern: /(?<!(?:import|require|from)\s+['"`][^'"`]*)\.\.\//g, type: 'Hardcoded directory traversal sequence' },
+            // Framework-specific patterns
+            { pattern: /File\s*\(\s*(?:req\.|request\.|input\.|params\.|query\.)/gi, type: 'File constructor with user input' },
+            { pattern: /FileInputStream\s*\(\s*(?:request\.getParameter|request\.getAttribute)/gi, type: 'Java FileInputStream with user input' },
+            { pattern: /fopen\s*\(\s*(?:\$_GET|\$_POST|\$_REQUEST)/gi, type: 'PHP fopen with user input' },
+            { pattern: /file_get_contents\s*\(\s*(?:\$_GET|\$_POST|\$_REQUEST)/gi, type: 'PHP file_get_contents with user input' },
+            // Python patterns
+            { pattern: /open\s*\(\s*(?:request\.|flask\.request\.)/gi, type: 'Python file open with user input' },
+            { pattern: /os\.path\.join\s*\([^)]*(?:request\.|flask\.request\.)/gi, type: 'Python path join with user input' },
+            // Node.js path operations
+            { pattern: /path\.join\s*\([^)]*(?:req\.|request\.|input\.|params\.|query\.)(?![^)]*(?:path\.resolve|path\.normalize))/gi, type: 'Path join without normalization' },
+            // Include/require with user input
+            { pattern: /(?:require|import)\s*\(\s*(?:req\.|request\.|input\.|params\.|query\.)/gi, type: 'Module import with user input' },
+            { pattern: /(?:include|require|include_once|require_once)\s*\(\s*(?:\$_GET|\$_POST|\$_REQUEST)/gi, type: 'PHP include with user input' }
+        ];
+        this.safePatterns = [
+            /path\.resolve/i,
+            /path\.normalize/i,
+            /path\.basename/i,
+            /sanitize/i,
+            /validate/i,
+            /whitelist/i,
+            /allowedPaths/i,
+            /isValidPath/i,
+            /checkPath/i,
+            /\.replace\s*\(\s*\/\.\.\//gi,
+            /\.replace\s*\(\s*\/\.\.\\/gi,
+            /filter/i,
+            /startsWith/i,
+            /includes.*allowed/i
+        ];
+    }
+    check(fileContent) {
+        const issues = [];
+        for (const { pattern, type } of this.traversalPatterns) {
+            const matches = this.findMatches(fileContent.content, pattern);
+            for (const { line, column, lineContent } of matches) {
+                // Skip if safe path handling is present
+                if (this.hasSafePathHandling(fileContent.content, line)) {
+                    continue;
+                }
+                // Skip if it's in a comment or test file
+                if (this.isCommentOrTest(lineContent, fileContent.path)) {
+                    continue;
+                }
+                // Skip if it's an import/require statement
+                if (this.isImportStatement(lineContent)) {
+                    continue;
+                }
+                // Skip if it's a hardcoded traversal in a test context
+                if (type === 'Hardcoded directory traversal sequence' && this.isTestContext(fileContent.content, line)) {
+                    continue;
+                }
+                issues.push(this.createIssue(fileContent.path, line, column, lineContent, `Potential directory traversal vulnerability: ${type}`, `Validate and sanitize file paths. Use path.resolve(), path.normalize(), or whitelist allowed directories. Never trust user input for file paths.`));
+            }
+        }
+        return issues;
+    }
+    hasSafePathHandling(content, lineNumber) {
+        const lines = content.split('\n');
+        const contextRange = 5; // Check 5 lines before and after
+        const startLine = Math.max(0, lineNumber - contextRange - 1);
+        const endLine = Math.min(lines.length, lineNumber + contextRange);
+        const contextLines = lines.slice(startLine, endLine).join('\n');
+        return this.safePatterns.some(pattern => pattern.test(contextLines));
+    }
+    isCommentOrTest(line, filePath) {
+        // Check if line is a comment
+        const commentPatterns = [
+            /^\s*\/\//, // JavaScript comment
+            /^\s*#/, // Python/Shell comment
+            /^\s*\*/ // Multi-line comment
+        ];
+        if (commentPatterns.some(pattern => pattern.test(line))) {
+            return true;
+        }
+        // Check if it's a test file
+        const testPatterns = [
+            /test/i,
+            /spec/i,
+            /\.test\./i,
+            /\.spec\./i,
+            /__tests__/i,
+            /tests\//i,
+            /spec\//i
+        ];
+        return testPatterns.some(pattern => pattern.test(filePath));
+    }
+    isImportStatement(line) {
+        const importPatterns = [
+            /^\s*import\s+.*from\s+['"`]/,
+            /^\s*import\s+['"`]/,
+            /^\s*const\s+.*=\s+require\s*\(\s*['"`]/,
+            /^\s*let\s+.*=\s+require\s*\(\s*['"`]/,
+            /^\s*var\s+.*=\s+require\s*\(\s*['"`]/,
+            /^\s*export\s+.*from\s+['"`]/,
+            /^\s*from\s+['"`]/
+        ];
+        return importPatterns.some(pattern => pattern.test(line));
+    }
+    isTestContext(content, lineNumber) {
+        const lines = content.split('\n');
+        const contextRange = 3;
+        const startLine = Math.max(0, lineNumber - contextRange - 1);
+        const endLine = Math.min(lines.length, lineNumber + contextRange);
+        const contextLines = lines.slice(startLine, endLine).join('\n');
+        const testPatterns = [
+            /test/i,
+            /spec/i,
+            /describe/i,
+            /it\(/i,
+            /expect/i,
+            /assert/i,
+            /mock/i,
+            /example/i,
+            /demo/i
+        ];
+        return testPatterns.some(pattern => pattern.test(contextLines));
+    }
+}
+exports.DirectoryTraversalRule = DirectoryTraversalRule;
+//# sourceMappingURL=directory-traversal.js.map

package/dist/rules/directory-traversal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"directory-traversal.js","sourceRoot":"","sources":["../../src/rules/directory-traversal.ts"],"names":[],"mappings":";;;AAAA,oCAAgE;AAEhE,MAAa,sBAAuB,SAAQ,gBAAQ;IAApD;;QACW,SAAI,GAAG,qBAAqB,CAAC;QAC7B,gBAAW,GAAG,uDAAuD,CAAC;QACtE,aAAQ,GAAG,MAAe,CAAC;QAEnB,sBAAiB,GAAG;YACnC,iCAAiC;YACjC,EAAE,OAAO,EAAE,wMAAwM,EAAE,IAAI,EAAE,gCAAgC,EAAE;YAE7P,8BAA8B;YAC9B,EAAE,OAAO,EAAE,uEAAuE,EAAE,IAAI,EAAE,wCAAwC,EAAE;YACpI,EAAE,OAAO,EAAE,qEAAqE,EAAE,IAAI,EAAE,kCAAkC,EAAE;YAE5H,qBAAqB;YACrB,EAAE,OAAO,EAAE,2EAA2E,EAAE,IAAI,EAAE,oCAAoC,EAAE;YACpI,EAAE,OAAO,EAAE,+DAA+D,EAAE,IAAI,EAAE,uCAAuC,EAAE;YAE3H,wDAAwD;YACxD,EAAE,OAAO,EAAE,oDAAoD,EAAE,IAAI,EAAE,wCAAwC,EAAE;YAEjH,8BAA8B;YAC9B,EAAE,OAAO,EAAE,4DAA4D,EAAE,IAAI,EAAE,kCAAkC,EAAE;YACnH,EAAE,OAAO,EAAE,0EAA0E,EAAE,IAAI,EAAE,sCAAsC,EAAE;YACrI,EAAE,OAAO,EAAE,8CAA8C,EAAE,IAAI,EAAE,2BAA2B,EAAE;YAC9F,EAAE,OAAO,EAAE,0DAA0D,EAAE,IAAI,EAAE,uCAAuC,EAAE;YAEtH,kBAAkB;YAClB,EAAE,OAAO,EAAE,8CAA8C,EAAE,IAAI,EAAE,kCAAkC,EAAE;YACrG,EAAE,OAAO,EAAE,0DAA0D,EAAE,IAAI,EAAE,kCAAkC,EAAE;YAEjH,0BAA0B;YAC1B,EAAE,OAAO,EAAE,8GAA8G,EAAE,IAAI,EAAE,iCAAiC,EAAE;YAEpK,kCAAkC;YAClC,EAAE,OAAO,EAAE,0EAA0E,EAAE,IAAI,EAAE,+BAA+B,EAAE;YAC9H,EAAE,OAAO,EAAE,sFAAsF,EAAE,IAAI,EAAE,6BAA6B,EAAE;SACzI,CAAC;QAEe,iBAAY,GAAG;YAC9B,gBAAgB;YAChB,kBAAkB;YAClB,iBAAiB;YACjB,WAAW;YACX,WAAW;YACX,YAAY;YACZ,eAAe;YACf,cAAc;YACd,YAAY;YACZ,6BAA6B;YAC7B,6BAA6B;YAC7B,SAAS;YACT,aAAa;YACb,oBAAoB;SACrB,CAAC;IAsHJ,CAAC;IApHC,KAAK,CAAC,WAAwB;QAC5B,MAAM,MAAM,GAAoB,EAAE,CAAC;QAEnC,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvD,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAE/D,KAAK,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,OAAO,EAAE,CAAC;gBACpD,wCAAwC;gBACxC,IAAI,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;oBACxD,SAAS;gBACX,CAAC;gBAED,yCAAyC;gBACzC,IAAI,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;oBACxD,SAAS;gBACX,CAAC;gBAED,2CAA2C;gBAC3C,IAAI,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,EAAE,CAAC;oBACxC,SAAS;gBACX,CAAC;gBAED,uDAAuD;gBACvD,IAAI,IAAI,KAAK,wCAAwC,IAAI,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;oBACvG,SAAS;gBACX,CAAC;gBAED,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAC1B,WAAW,CAAC,IAAI,EAChB,IAAI,EACJ,MAAM,EACN,WAAW,EACX,gDAAgD,IAAI,EAAE,EACtD,kJAAkJ,CACnJ,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,mBAAmB,CAAC,OAAe,EAAE,UAAkB;QAC7D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,YAAY,GAAG,CAAC,CAAC,CAAC,iCAAiC;QAEzD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,YAAY,GAAG,CAAC,CAAC,CAAC;QAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,GAAG,YAAY,CAAC,CAAC;QAElE,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEhE,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IACvE,CAAC;IAEO,eAAe,CAAC,IAAY,EAAE,QAAgB;QACpD,6BAA6B;QAC7B,MAAM,eAAe,GAAG;YACtB,UAAU,EAAG,qBAAqB;YAClC,OAAO,EAAM,uBAAuB;YACpC,QAAQ,CAAK,qBAAqB;SACnC,CAAC;QAEF,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACxD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,4BAA4B;QAC5B,MAAM,YAAY,GAAG;YACnB,OAAO;YACP,OAAO;YACP,WAAW;YACX,WAAW;YACX,YAAY;YACZ,UAAU;YACV,SAAS;SACV,CAAC;QAEF,OAAO,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9D,CAAC;IAEO,iBAAiB,CAAC,IAAY;QACpC,MAAM,cAAc,GAAG;YACrB,6BAA6B;YAC7B,oBAAoB;YACpB,wCAAwC;YACxC,sCAAsC;YACtC,sCAAsC;YACtC,6BAA6B;YAC7B,kBAAkB;SACnB,CAAC;QAEF,OAAO,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5D,CAAC;IAEO,aAAa,CAAC,OAAe,EAAE,UAAkB;QACvD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,YAAY,GAAG,CAAC,CAAC;QAEvB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,YAAY,GAAG,CAAC,CAAC,CAAC;QAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,GAAG,YAAY,CAAC,CAAC;QAElE,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEhE,MAAM,YAAY,GAAG;YACnB,OAAO;YACP,OAAO;YACP,WAAW;YACX,OAAO;YACP,SAAS;YACT,SAAS;YACT,OAAO;YACP,UAAU;YACV,OAAO;SACR,CAAC;QAEF,OAAO,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IAClE,CAAC;CACF;AA3KD,wDA2KC"}

package/dist/rules/exposed-secrets.d.ts

@@ -0,0 +1,13 @@
+import { BaseRule, FileContent, SecurityIssue } from '../types';
+export declare class ExposedSecretsRule extends BaseRule {
+    readonly name = "exposed-secrets";
+    readonly description = "Detects exposed API keys, tokens, and credentials";
+    readonly severity: "critical";
+    private readonly secretPatterns;
+    private readonly falsePositivePatterns;
+    check(fileContent: FileContent): SecurityIssue[];
+    private isFalsePositive;
+    private isValidBase64Secret;
+    private maskSecret;
+}
+//# sourceMappingURL=exposed-secrets.d.ts.map

package/dist/rules/exposed-secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exposed-secrets.d.ts","sourceRoot":"","sources":["../../src/rules/exposed-secrets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEhE,qBAAa,kBAAmB,SAAQ,QAAQ;IAC9C,QAAQ,CAAC,IAAI,qBAAqB;IAClC,QAAQ,CAAC,WAAW,uDAAuD;IAC3E,QAAQ,CAAC,QAAQ,EAAG,UAAU,CAAU;IAExC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAiC7B;IAEF,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAoBpC;IAEF,KAAK,CAAC,WAAW,EAAE,WAAW,GAAG,aAAa,EAAE;IAiChD,OAAO,CAAC,eAAe;IAyBvB,OAAO,CAAC,mBAAmB;IAiC3B,OAAO,CAAC,UAAU;CAWnB"}

package/dist/rules/exposed-secrets.js

@@ -0,0 +1,137 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ExposedSecretsRule = void 0;
+const types_1 = require("../types");
+class ExposedSecretsRule extends types_1.BaseRule {
+    constructor() {
+        super(...arguments);
+        this.name = 'exposed-secrets';
+        this.description = 'Detects exposed API keys, tokens, and credentials';
+        this.severity = 'critical';
+        this.secretPatterns = [
+            // API Keys
+            { pattern: /(?:api[_-]?key|apikey)\s*[:=]\s*['"`]([a-zA-Z0-9_\-]{20,})/gi, type: 'API Key' },
+            { pattern: /(?:secret[_-]?key|secretkey)\s*[:=]\s*['"`]([a-zA-Z0-9_\-]{20,})/gi, type: 'Secret Key' },
+            { pattern: /(?:access[_-]?token|accesstoken)\s*[:=]\s*['"`]([a-zA-Z0-9_\-]{20,})/gi, type: 'Access Token' },
+            // AWS
+            { pattern: /AKIA[0-9A-Z]{16}/g, type: 'AWS Access Key' },
+            { pattern: /(?:aws[_-]?secret|AWS_SECRET)\s*[:=]\s*['"`]([a-zA-Z0-9/+=]{40})/gi, type: 'AWS Secret' },
+            // GitHub
+            { pattern: /ghp_[a-zA-Z0-9]{36}/g, type: 'GitHub Personal Access Token' },
+            { pattern: /ghs_[a-zA-Z0-9]{36}/g, type: 'GitHub App Token' },
+            { pattern: /ghr_[a-zA-Z0-9]{36}/g, type: 'GitHub Refresh Token' },
+            // Google
+            { pattern: /AIza[0-9A-Za-z_\-]{35}/g, type: 'Google API Key' },
+            // Slack
+            { pattern: /xox[baprs]-[0-9a-zA-Z\-]{10,}/g, type: 'Slack Token' },
+            // JWT
+            { pattern: /eyJ[a-zA-Z0-9_\-]*\.eyJ[a-zA-Z0-9_\-]*\.[a-zA-Z0-9_\-]*/g, type: 'JWT Token' },
+            // Database URLs
+            { pattern: /(?:mongodb|mysql|postgres|redis):\/\/[^\s'"]+/gi, type: 'Database URL' },
+            // Base64 encoded secrets (more specific pattern)
+            { pattern: /(?:secret|token|key|auth|password)\s*[:=]\s*['"`]([A-Za-z0-9+/]{40,}={0,2})['"`]/gi, type: 'Base64 Encoded Secret' },
+            // Generic patterns (more specific to avoid variable names)
+            { pattern: /(?:password|passwd|pwd)\s*[:=]\s*['"`]([^'"`\s]{8,})/gi, type: 'Password' },
+            { pattern: /(?:^|[^a-zA-Z0-9_])(?:token|auth)\s*[:=]\s*['"`]([a-zA-Z0-9_\-]{20,})/gi, type: 'Auth Token' }
+        ];
+        this.falsePositivePatterns = [
+            /example/i,
+            /demo/i,
+            /placeholder/i,
+            /your[_-]?key/i,
+            /your[_-]?token/i,
+            /your[_-]?secret/i,
+            /\$\{.*\}/, // Environment variables
+            /%.*%/, // Windows environment variables
+            /\{\{.*\}\}/, // Template variables
+            /^xxx+$/i, // Only xxx repeated
+            /^aaa+$/i, // Only aaa repeated
+            /^000+$/, // Only zeros repeated
+            /^111+$/, // Only ones repeated
+            /^123+$/, // Only 123 repeated
+            /test/i, // Test values
+            /mock/i, // Mock values
+            /sample/i, // Sample values
+            /dummy/i, // Dummy values
+            /^(.)\1{7,}$/ // Any character repeated 8+ times
+        ];
+    }
+    check(fileContent) {
+        const issues = [];
+        for (const { pattern, type } of this.secretPatterns) {
+            const matches = this.findMatches(fileContent.content, pattern);
+            for (const { match, line, column, lineContent } of matches) {
+                const matchedText = match[0];
+                // Skip false positives
+                if (this.isFalsePositive(matchedText)) {
+                    continue;
+                }
+                // Additional validation for Base64 secrets
+                if (type === 'Base64 Encoded Secret' && !this.isValidBase64Secret(matchedText)) {
+                    continue;
+                }
+                issues.push(this.createIssue(fileContent.path, line, column, lineContent, `Exposed ${type} detected: ${this.maskSecret(matchedText)}`, `Remove hardcoded secrets and use environment variables or secure secret management instead. Consider using tools like dotenv for local development.`));
+            }
+        }
+        return issues;
+    }
+    isFalsePositive(text) {
+        // Check against false positive patterns first
+        if (this.falsePositivePatterns.some(pattern => pattern.test(text))) {
+            return true;
+        }
+        // Extract the actual secret value from the match
+        const secretMatch = text.match(/['"`]([^'"`]+)['"`]/);
+        if (secretMatch && secretMatch[1]) {
+            const secretValue = secretMatch[1];
+            // Check if it's all the same character repeated
+            if (/^(.)\1{7,}$/.test(secretValue)) {
+                return true;
+            }
+            // Check if it's a simple pattern like 123456789...
+            if (/^(012|123|234|345|456|567|678|789|890)+$/.test(secretValue)) {
+                return true;
+            }
+        }
+        return false;
+    }
+    isValidBase64Secret(text) {
+        try {
+            // Extract the base64 part from the match
+            const base64Match = text.match(/([A-Za-z0-9+/]{32,}={0,2})/);
+            if (!base64Match || !base64Match[1])
+                return false;
+            const base64String = base64Match[1];
+            // Check if it's valid base64
+            const decoded = Buffer.from(base64String, 'base64').toString('utf-8');
+            // Skip if it decodes to common false positives
+            if (/^(test|example|demo|placeholder|sample|dummy)/i.test(decoded)) {
+                return false;
+            }
+            // Skip if it's too short when decoded (likely not a real secret)
+            if (decoded.length < 8) {
+                return false;
+            }
+            // Skip if it contains only repeated characters
+            if (/^(.)\1+$/.test(decoded)) {
+                return false;
+            }
+            return true;
+        }
+        catch {
+            // If we can't decode it, it's probably not valid base64
+            return false;
+        }
+    }
+    maskSecret(secret) {
+        if (secret.length <= 8) {
+            return '*'.repeat(secret.length);
+        }
+        const start = secret.substring(0, 4);
+        const end = secret.substring(secret.length - 4);
+        const middle = '*'.repeat(Math.min(secret.length - 8, 10));
+        return `${start}${middle}${end}`;
+    }
+}
+exports.ExposedSecretsRule = ExposedSecretsRule;
+//# sourceMappingURL=exposed-secrets.js.map

package/dist/rules/exposed-secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exposed-secrets.js","sourceRoot":"","sources":["../../src/rules/exposed-secrets.ts"],"names":[],"mappings":";;;AAAA,oCAAgE;AAEhE,MAAa,kBAAmB,SAAQ,gBAAQ;IAAhD;;QACW,SAAI,GAAG,iBAAiB,CAAC;QACzB,gBAAW,GAAG,mDAAmD,CAAC;QAClE,aAAQ,GAAG,UAAmB,CAAC;QAEvB,mBAAc,GAAG;YAChC,WAAW;YACX,EAAE,OAAO,EAAE,8DAA8D,EAAE,IAAI,EAAE,SAAS,EAAE;YAC5F,EAAE,OAAO,EAAE,oEAAoE,EAAE,IAAI,EAAE,YAAY,EAAE;YACrG,EAAE,OAAO,EAAE,wEAAwE,EAAE,IAAI,EAAE,cAAc,EAAE;YAE3G,MAAM;YACN,EAAE,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,gBAAgB,EAAE;YACxD,EAAE,OAAO,EAAE,oEAAoE,EAAE,IAAI,EAAE,YAAY,EAAE;YAErG,SAAS;YACT,EAAE,OAAO,EAAE,sBAAsB,EAAE,IAAI,EAAE,8BAA8B,EAAE;YACzE,EAAE,OAAO,EAAE,sBAAsB,EAAE,IAAI,EAAE,kBAAkB,EAAE;YAC7D,EAAE,OAAO,EAAE,sBAAsB,EAAE,IAAI,EAAE,sBAAsB,EAAE;YAEjE,SAAS;YACT,EAAE,OAAO,EAAE,yBAAyB,EAAE,IAAI,EAAE,gBAAgB,EAAE;YAE9D,QAAQ;YACR,EAAE,OAAO,EAAE,gCAAgC,EAAE,IAAI,EAAE,aAAa,EAAE;YAElE,MAAM;YACN,EAAE,OAAO,EAAE,0DAA0D,EAAE,IAAI,EAAE,WAAW,EAAE;YAE1F,gBAAgB;YAChB,EAAE,OAAO,EAAE,iDAAiD,EAAE,IAAI,EAAE,cAAc,EAAE;YAEpF,iDAAiD;YACjD,EAAE,OAAO,EAAE,oFAAoF,EAAE,IAAI,EAAE,uBAAuB,EAAE;YAEhI,2DAA2D;YAC3D,EAAE,OAAO,EAAE,wDAAwD,EAAE,IAAI,EAAE,UAAU,EAAE;YACvF,EAAE,OAAO,EAAE,yEAAyE,EAAE,IAAI,EAAE,YAAY,EAAE;SAC3G,CAAC;QAEe,0BAAqB,GAAG;YACvC,UAAU;YACV,OAAO;YACP,cAAc;YACd,eAAe;YACf,iBAAiB;YACjB,kBAAkB;YAClB,UAAU,EAAG,wBAAwB;YACrC,MAAM,EAAO,gCAAgC;YAC7C,YAAY,EAAE,qBAAqB;YACnC,SAAS,EAAI,oBAAoB;YACjC,SAAS,EAAI,oBAAoB;YACjC,QAAQ,EAAK,sBAAsB;YACnC,QAAQ,EAAK,qBAAqB;YAClC,QAAQ,EAAK,oBAAoB;YACjC,OAAO,EAAM,cAAc;YAC3B,OAAO,EAAM,cAAc;YAC3B,SAAS,EAAI,gBAAgB;YAC7B,QAAQ,EAAK,eAAe;YAC5B,aAAa,CAAE,kCAAkC;SAClD,CAAC;IAwGJ,CAAC;IAtGC,KAAK,CAAC,WAAwB;QAC5B,MAAM,MAAM,GAAoB,EAAE,CAAC;QAEnC,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACpD,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAE/D,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,OAAO,EAAE,CAAC;gBAC3D,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBAE7B,uBAAuB;gBACvB,IAAI,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,EAAE,CAAC;oBACtC,SAAS;gBACX,CAAC;gBAED,2CAA2C;gBAC3C,IAAI,IAAI,KAAK,uBAAuB,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,EAAE,CAAC;oBAC/E,SAAS;gBACX,CAAC;gBAED,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAC1B,WAAW,CAAC,IAAI,EAChB,IAAI,EACJ,MAAM,EACN,WAAW,EACX,WAAW,IAAI,cAAc,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,EAC3D,qJAAqJ,CACtJ,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,eAAe,CAAC,IAAY;QAClC,8CAA8C;QAC9C,IAAI,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACnE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,iDAAiD;QACjD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACtD,IAAI,WAAW,IAAI,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;YAClC,MAAM,WAAW,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;YAEnC,gDAAgD;YAChD,IAAI,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBACpC,OAAO,IAAI,CAAC;YACd,CAAC;YAED,mDAAmD;YACnD,IAAI,0CAA0C,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBACjE,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,mBAAmB,CAAC,IAAY;QACtC,IAAI,CAAC;YACH,yCAAyC;YACzC,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAC7D,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;YAElD,MAAM,YAAY,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;YAEpC,6BAA6B;YAC7B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAEtE,+CAA+C;YAC/C,IAAI,gDAAgD,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnE,OAAO,KAAK,CAAC;YACf,CAAC;YAED,iEAAiE;YACjE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,OAAO,KAAK,CAAC;YACf,CAAC;YAED,+CAA+C;YAC/C,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC7B,OAAO,KAAK,CAAC;YACf,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,wDAAwD;YACxD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEO,UAAU,CAAC,MAAc;QAC/B,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACvB,OAAO,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACrC,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAE3D,OAAO,GAAG,KAAK,GAAG,MAAM,GAAG,GAAG,EAAE,CAAC;IACnC,CAAC;CACF;AApKD,gDAoKC"}

package/dist/rules/hardcoded-sensitive-data.d.ts

@@ -0,0 +1,13 @@
+import { BaseRule, FileContent, SecurityIssue } from '../types';
+export declare class HardcodedSensitiveDataRule extends BaseRule {
+    readonly name = "hardcoded-sensitive-data";
+    readonly description = "Detects hardcoded sensitive information in configuration files";
+    readonly severity: "critical";
+    private readonly sensitivePatterns;
+    private readonly falsePositivePatterns;
+    check(fileContent: FileContent): SecurityIssue[];
+    private isSensitiveFile;
+    private isFalsePositive;
+    private maskSensitiveData;
+}
+//# sourceMappingURL=hardcoded-sensitive-data.d.ts.map

package/dist/rules/hardcoded-sensitive-data.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hardcoded-sensitive-data.d.ts","sourceRoot":"","sources":["../../src/rules/hardcoded-sensitive-data.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEhE,qBAAa,0BAA2B,SAAQ,QAAQ;IACtD,QAAQ,CAAC,IAAI,8BAA8B;IAC3C,QAAQ,CAAC,WAAW,oEAAoE;IACxF,QAAQ,CAAC,QAAQ,EAAG,UAAU,CAAU;IAExC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAwBhC;IAEF,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAgBpC;IAEF,KAAK,CAAC,WAAW,EAAE,WAAW,GAAG,aAAa,EAAE;IAiChD,OAAO,CAAC,eAAe;IAwBvB,OAAO,CAAC,eAAe;IAIvB,OAAO,CAAC,iBAAiB;CAW1B"}

package/dist/rules/hardcoded-sensitive-data.js

@@ -0,0 +1,104 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HardcodedSensitiveDataRule = void 0;
+const types_1 = require("../types");
+class HardcodedSensitiveDataRule extends types_1.BaseRule {
+    constructor() {
+        super(...arguments);
+        this.name = 'hardcoded-sensitive-data';
+        this.description = 'Detects hardcoded sensitive information in configuration files';
+        this.severity = 'critical';
+        this.sensitivePatterns = [
+            // Database connections
+            { pattern: /(?:database_url|db_url|connection_string)\s*[:=]\s*['"`]([^'"`\s]+)['"`]/gi, type: 'Database Connection' },
+            { pattern: /(?:mongodb|mysql|postgres|redis):\/\/[^'"`\s]+/gi, type: 'Database URL' },
+            // Encryption keys
+            { pattern: /(?:encryption_key|secret_key|private_key)\s*[:=]\s*['"`]([a-zA-Z0-9+/=]{20,})['"`]/gi, type: 'Encryption Key' },
+            { pattern: /-----BEGIN\s+(?:RSA\s+)?PRIVATE\s+KEY-----/gi, type: 'Private Key' },
+            // Configuration secrets
+            { pattern: /(?:app_secret|session_secret|jwt_secret)\s*[:=]\s*['"`]([^'"`\s]{16,})['"`]/gi, type: 'Application Secret' },
+            { pattern: /(?:salt|hash_salt)\s*[:=]\s*['"`]([^'"`\s]{8,})['"`]/gi, type: 'Cryptographic Salt' },
+            // Third-party service keys
+            { pattern: /(?:stripe_secret|stripe_key)\s*[:=]\s*['"`](sk_[a-zA-Z0-9_]+)['"`]/gi, type: 'Stripe Secret Key' },
+            { pattern: /(?:sendgrid_api_key)\s*[:=]\s*['"`](SG\.[a-zA-Z0-9_\-\.]+)['"`]/gi, type: 'SendGrid API Key' },
+            { pattern: /(?:twilio_auth_token)\s*[:=]\s*['"`]([a-zA-Z0-9]{32})['"`]/gi, type: 'Twilio Auth Token' },
+            // Generic sensitive patterns
+            { pattern: /(?:admin_password|root_password|db_password)\s*[:=]\s*['"`]([^'"`\s]{6,})['"`]/gi, type: 'Admin Password' },
+            { pattern: /(?:webhook_secret|signing_secret)\s*[:=]\s*['"`]([^'"`\s]{16,})['"`]/gi, type: 'Webhook Secret' },
+            // Configuration file patterns
+            { pattern: /password\s*[:=]\s*['"`](?!.*(?:password|secret|key|token))[^'"`\s]{8,}['"`]/gi, type: 'Configuration Password' }
+        ];
+        this.falsePositivePatterns = [
+            /example/i,
+            /sample/i,
+            /demo/i,
+            /placeholder/i,
+            /your[_-]?(?:key|secret|password)/i,
+            /\$\{.*\}/, // Environment variables
+            /%.*%/, // Windows environment variables
+            /\{\{.*\}\}/, // Template variables
+            /^[x]+$/i, // Only x's
+            /^[*]+$/, // Only asterisks
+            /^[0]+$/, // Only zeros
+            /^[1]+$/, // Only ones
+            /test/i,
+            /mock/i,
+            /fake/i
+        ];
+    }
+    check(fileContent) {
+        const issues = [];
+        // Focus on configuration files and certain code files
+        if (!this.isSensitiveFile(fileContent.path)) {
+            return issues;
+        }
+        for (const { pattern, type } of this.sensitivePatterns) {
+            const matches = this.findMatches(fileContent.content, pattern);
+            for (const { match, line, column, lineContent } of matches) {
+                const matchedText = match[0];
+                // Skip false positives
+                if (this.isFalsePositive(matchedText)) {
+                    continue;
+                }
+                issues.push(this.createIssue(fileContent.path, line, column, lineContent, `Hardcoded ${type} found: ${this.maskSensitiveData(matchedText)}`, `Move sensitive data to environment variables or secure configuration management. Use process.env.VARIABLE_NAME or a secrets management service.`));
+            }
+        }
+        return issues;
+    }
+    isSensitiveFile(filePath) {
+        const sensitiveFiles = [
+            /\.env/i,
+            /\.config/i,
+            /\.conf/i,
+            /\.ini/i,
+            /\.properties/i,
+            /\.yaml/i,
+            /\.yml/i,
+            /\.json/i,
+            /\.toml/i,
+            /config\./i,
+            /settings\./i,
+            /constants\./i,
+            /\.js$/i,
+            /\.ts$/i,
+            /\.py$/i,
+            /\.php$/i,
+            /\.rb$/i
+        ];
+        return sensitiveFiles.some(pattern => pattern.test(filePath));
+    }
+    isFalsePositive(text) {
+        return this.falsePositivePatterns.some(pattern => pattern.test(text));
+    }
+    maskSensitiveData(data) {
+        if (data.length <= 8) {
+            return '*'.repeat(data.length);
+        }
+        const start = data.substring(0, 4);
+        const end = data.substring(data.length - 4);
+        const middle = '*'.repeat(Math.min(data.length - 8, 10));
+        return `${start}${middle}${end}`;
+    }
+}
+exports.HardcodedSensitiveDataRule = HardcodedSensitiveDataRule;
+//# sourceMappingURL=hardcoded-sensitive-data.js.map

package/dist/rules/hardcoded-sensitive-data.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hardcoded-sensitive-data.js","sourceRoot":"","sources":["../../src/rules/hardcoded-sensitive-data.ts"],"names":[],"mappings":";;;AAAA,oCAAgE;AAEhE,MAAa,0BAA2B,SAAQ,gBAAQ;IAAxD;;QACW,SAAI,GAAG,0BAA0B,CAAC;QAClC,gBAAW,GAAG,gEAAgE,CAAC;QAC/E,aAAQ,GAAG,UAAmB,CAAC;QAEvB,sBAAiB,GAAG;YACnC,uBAAuB;YACvB,EAAE,OAAO,EAAE,4EAA4E,EAAE,IAAI,EAAE,qBAAqB,EAAE;YACtH,EAAE,OAAO,EAAE,kDAAkD,EAAE,IAAI,EAAE,cAAc,EAAE;YAErF,kBAAkB;YAClB,EAAE,OAAO,EAAE,sFAAsF,EAAE,IAAI,EAAE,gBAAgB,EAAE;YAC3H,EAAE,OAAO,EAAE,8CAA8C,EAAE,IAAI,EAAE,aAAa,EAAE;YAEhF,wBAAwB;YACxB,EAAE,OAAO,EAAE,+EAA+E,EAAE,IAAI,EAAE,oBAAoB,EAAE;YACxH,EAAE,OAAO,EAAE,wDAAwD,EAAE,IAAI,EAAE,oBAAoB,EAAE;YAEjG,2BAA2B;YAC3B,EAAE,OAAO,EAAE,sEAAsE,EAAE,IAAI,EAAE,mBAAmB,EAAE;YAC9G,EAAE,OAAO,EAAE,mEAAmE,EAAE,IAAI,EAAE,kBAAkB,EAAE;YAC1G,EAAE,OAAO,EAAE,8DAA8D,EAAE,IAAI,EAAE,mBAAmB,EAAE;YAEtG,6BAA6B;YAC7B,EAAE,OAAO,EAAE,kFAAkF,EAAE,IAAI,EAAE,gBAAgB,EAAE;YACvH,EAAE,OAAO,EAAE,wEAAwE,EAAE,IAAI,EAAE,gBAAgB,EAAE;YAE7G,8BAA8B;YAC9B,EAAE,OAAO,EAAE,+EAA+E,EAAE,IAAI,EAAE,wBAAwB,EAAE;SAC7H,CAAC;QAEe,0BAAqB,GAAG;YACvC,UAAU;YACV,SAAS;YACT,OAAO;YACP,cAAc;YACd,mCAAmC;YACnC,UAAU,EAAG,wBAAwB;YACrC,MAAM,EAAO,gCAAgC;YAC7C,YAAY,EAAE,qBAAqB;YACnC,SAAS,EAAI,WAAW;YACxB,QAAQ,EAAK,iBAAiB;YAC9B,QAAQ,EAAK,aAAa;YAC1B,QAAQ,EAAK,YAAY;YACzB,OAAO;YACP,OAAO;YACP,OAAO;SACR,CAAC;IA0EJ,CAAC;IAxEC,KAAK,CAAC,WAAwB;QAC5B,MAAM,MAAM,GAAoB,EAAE,CAAC;QAEnC,sDAAsD;QACtD,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5C,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvD,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAE/D,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,OAAO,EAAE,CAAC;gBAC3D,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBAE7B,uBAAuB;gBACvB,IAAI,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,EAAE,CAAC;oBACtC,SAAS;gBACX,CAAC;gBAED,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAC1B,WAAW,CAAC,IAAI,EAChB,IAAI,EACJ,MAAM,EACN,WAAW,EACX,aAAa,IAAI,WAAW,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,EAAE,EACjE,iJAAiJ,CAClJ,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,eAAe,CAAC,QAAgB;QACtC,MAAM,cAAc,GAAG;YACrB,QAAQ;YACR,WAAW;YACX,SAAS;YACT,QAAQ;YACR,eAAe;YACf,SAAS;YACT,QAAQ;YACR,SAAS;YACT,SAAS;YACT,WAAW;YACX,aAAa;YACb,cAAc;YACd,QAAQ;YACR,QAAQ;YACR,QAAQ;YACR,SAAS;YACT,QAAQ;SACT,CAAC;QAEF,OAAO,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAChE,CAAC;IAEO,eAAe,CAAC,IAAY;QAClC,OAAO,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACxE,CAAC;IAEO,iBAAiB,CAAC,IAAY;QACpC,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACrB,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAEzD,OAAO,GAAG,KAAK,GAAG,MAAM,GAAG,GAAG,EAAE,CAAC;IACnC,CAAC;CACF;AAzHD,gEAyHC"}

package/dist/rules/index.d.ts

@@ -0,0 +1,15 @@
+import { BaseRule } from '../types';
+import { ExposedSecretsRule } from './exposed-secrets';
+import { MissingAuthenticationRule } from './missing-authentication';
+import { OpenCorsRule } from './open-cors';
+import { HardcodedSensitiveDataRule } from './hardcoded-sensitive-data';
+import { InsecureHttpRule } from './insecure-http';
+import { SqlInjectionRule } from './sql-injection';
+import { UnvalidatedInputRule } from './unvalidated-input';
+import { DirectoryTraversalRule } from './directory-traversal';
+import { InsecureDependenciesRule } from './insecure-dependencies';
+import { MissingSecurityHeadersRule } from './missing-security-headers';
+export declare function getAllRules(): BaseRule[];
+export { ExposedSecretsRule, MissingAuthenticationRule, OpenCorsRule, HardcodedSensitiveDataRule, InsecureHttpRule, SqlInjectionRule, UnvalidatedInputRule, DirectoryTraversalRule, InsecureDependenciesRule, MissingSecurityHeadersRule, };
+export * from '../types';
+//# sourceMappingURL=index.d.ts.map

package/dist/rules/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/rules/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AAExE,wBAAgB,WAAW,IAAI,QAAQ,EAAE,CAaxC;AAED,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,YAAY,EACZ,0BAA0B,EAC1B,gBAAgB,EAChB,gBAAgB,EAChB,oBAAoB,EACpB,sBAAsB,EACtB,wBAAwB,EACxB,0BAA0B,GAE3B,CAAC;AAEF,cAAc,UAAU,CAAC"}

package/dist/rules/index.js

@@ -0,0 +1,54 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MissingSecurityHeadersRule = exports.InsecureDependenciesRule = exports.DirectoryTraversalRule = exports.UnvalidatedInputRule = exports.SqlInjectionRule = exports.InsecureHttpRule = exports.HardcodedSensitiveDataRule = exports.OpenCorsRule = exports.MissingAuthenticationRule = exports.ExposedSecretsRule = void 0;
+exports.getAllRules = getAllRules;
+const exposed_secrets_1 = require("./exposed-secrets");
+Object.defineProperty(exports, "ExposedSecretsRule", { enumerable: true, get: function () { return exposed_secrets_1.ExposedSecretsRule; } });
+const missing_authentication_1 = require("./missing-authentication");
+Object.defineProperty(exports, "MissingAuthenticationRule", { enumerable: true, get: function () { return missing_authentication_1.MissingAuthenticationRule; } });
+const open_cors_1 = require("./open-cors");
+Object.defineProperty(exports, "OpenCorsRule", { enumerable: true, get: function () { return open_cors_1.OpenCorsRule; } });
+const hardcoded_sensitive_data_1 = require("./hardcoded-sensitive-data");
+Object.defineProperty(exports, "HardcodedSensitiveDataRule", { enumerable: true, get: function () { return hardcoded_sensitive_data_1.HardcodedSensitiveDataRule; } });
+const insecure_http_1 = require("./insecure-http");
+Object.defineProperty(exports, "InsecureHttpRule", { enumerable: true, get: function () { return insecure_http_1.InsecureHttpRule; } });
+const sql_injection_1 = require("./sql-injection");
+Object.defineProperty(exports, "SqlInjectionRule", { enumerable: true, get: function () { return sql_injection_1.SqlInjectionRule; } });
+const unvalidated_input_1 = require("./unvalidated-input");
+Object.defineProperty(exports, "UnvalidatedInputRule", { enumerable: true, get: function () { return unvalidated_input_1.UnvalidatedInputRule; } });
+const directory_traversal_1 = require("./directory-traversal");
+Object.defineProperty(exports, "DirectoryTraversalRule", { enumerable: true, get: function () { return directory_traversal_1.DirectoryTraversalRule; } });
+const insecure_dependencies_1 = require("./insecure-dependencies");
+Object.defineProperty(exports, "InsecureDependenciesRule", { enumerable: true, get: function () { return insecure_dependencies_1.InsecureDependenciesRule; } });
+const missing_security_headers_1 = require("./missing-security-headers");
+Object.defineProperty(exports, "MissingSecurityHeadersRule", { enumerable: true, get: function () { return missing_security_headers_1.MissingSecurityHeadersRule; } });
+function getAllRules() {
+    return [
+        new exposed_secrets_1.ExposedSecretsRule(),
+        new missing_authentication_1.MissingAuthenticationRule(),
+        new open_cors_1.OpenCorsRule(),
+        new hardcoded_sensitive_data_1.HardcodedSensitiveDataRule(),
+        new insecure_http_1.InsecureHttpRule(),
+        new sql_injection_1.SqlInjectionRule(),
+        new unvalidated_input_1.UnvalidatedInputRule(),
+        new directory_traversal_1.DirectoryTraversalRule(),
+        new insecure_dependencies_1.InsecureDependenciesRule(),
+        new missing_security_headers_1.MissingSecurityHeadersRule(),
+    ];
+}
+__exportStar(require("../types"), exports);
+//# sourceMappingURL=index.js.map

package/dist/rules/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/rules/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAYA,kCAaC;AAxBD,uDAAuD;AA2BrD,mGA3BO,oCAAkB,OA2BP;AA1BpB,qEAAqE;AA2BnE,0GA3BO,kDAAyB,OA2BP;AA1B3B,2CAA2C;AA2BzC,6FA3BO,wBAAY,OA2BP;AA1Bd,yEAAwE;AA2BtE,2GA3BO,qDAA0B,OA2BP;AA1B5B,mDAAmD;AA2BjD,iGA3BO,gCAAgB,OA2BP;AA1BlB,mDAAmD;AA2BjD,iGA3BO,gCAAgB,OA2BP;AA1BlB,2DAA2D;AA2BzD,qGA3BO,wCAAoB,OA2BP;AA1BtB,+DAA+D;AA2B7D,uGA3BO,4CAAsB,OA2BP;AA1BxB,mEAAmE;AA2BjE,yGA3BO,gDAAwB,OA2BP;AA1B1B,yEAAwE;AA2BtE,2GA3BO,qDAA0B,OA2BP;AAzB5B,SAAgB,WAAW;IACzB,OAAO;QACL,IAAI,oCAAkB,EAAE;QACxB,IAAI,kDAAyB,EAAE;QAC/B,IAAI,wBAAY,EAAE;QAClB,IAAI,qDAA0B,EAAE;QAChC,IAAI,gCAAgB,EAAE;QACtB,IAAI,gCAAgB,EAAE;QACtB,IAAI,wCAAoB,EAAE;QAC1B,IAAI,4CAAsB,EAAE;QAC5B,IAAI,gDAAwB,EAAE;QAC9B,IAAI,qDAA0B,EAAE;KACjC,CAAC;AACJ,CAAC;AAgBD,2CAAyB"}

package/dist/rules/insecure-dependencies.d.ts

@@ -0,0 +1,16 @@
+import { BaseRule, FileContent, SecurityIssue } from '../types';
+export declare class InsecureDependenciesRule extends BaseRule {
+    readonly name = "insecure-dependencies";
+    readonly description = "Detects potentially insecure dependencies and packages";
+    readonly severity: "medium";
+    private readonly vulnerablePackages;
+    private readonly suspiciousPatterns;
+    check(fileContent: FileContent): SecurityIssue[];
+    private isDependencyFile;
+    private checkVulnerablePackages;
+    private checkSuspiciousPatterns;
+    private isVulnerableVersion;
+    private compareVersions;
+    private isInDevDependencies;
+}
+//# sourceMappingURL=insecure-dependencies.d.ts.map

package/dist/rules/insecure-dependencies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"insecure-dependencies.d.ts","sourceRoot":"","sources":["../../src/rules/insecure-dependencies.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEhE,qBAAa,wBAAyB,SAAQ,QAAQ;IACpD,QAAQ,CAAC,IAAI,2BAA2B;IACxC,QAAQ,CAAC,WAAW,4DAA4D;IAChF,QAAQ,CAAC,QAAQ,EAAG,QAAQ,CAAU;IAEtC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAwBjC;IAEF,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAajC;IAEF,KAAK,CAAC,WAAW,EAAE,WAAW,GAAG,aAAa,EAAE;IAiBhD,OAAO,CAAC,gBAAgB;IAgBxB,OAAO,CAAC,uBAAuB;IAsB/B,OAAO,CAAC,uBAAuB;IAsB/B,OAAO,CAAC,mBAAmB;IAuB3B,OAAO,CAAC,eAAe;IAgBvB,OAAO,CAAC,mBAAmB;CA0B5B"}