NodeJsScan v4.8 releases: static security code scanner for Node.js applications
NodeJsScan
Static security code scanner (SAST) for Node.js applications.
Changelog v4.6
- njsscan bump + performance upgrade.
- Test Fix
- Dependency updates
How to Configure
- Clone the repo:
git clone https://github.com/ajinabraham/NodeJsScan.git
- Install Postgres and configure SQLALCHEMY_DATABASE_URI in core/settings.py
- Run pip install -r requirements.txt
- Run python createdb.py
- Run python app.py
This will run NodeJsScan on http://0.0.0.0:9090 If you need to debug, set DEBUG = True in core/settings.py
NodeJsScan CLI
The command-line interface (CLI) allows you to integrate NodeJsScan with DevSecOps CI/CD pipelines. The results are in JSON format. When you use CLI the results are never stored with a NodeJsScan backend.
python cli.py -d <node_js_source_code>
Learn Node.js Security: Pentesting and Exploitation
Docker
docker build -t nodejsscan . docker run -it -p 9090:9090 nodejsscan
DockerHub
docker pull opensecurity/nodejsscan docker run -it -p 9090:9090 opensecurity/nodejsscan:latest
NodeJsScan Web UI
Static Analysis
Copyright (C) ajinabraham
Source: https://github.com/ajinabraham/
