Documentation
¶
Index ¶
- func DetectLanguages(path string) []string
- func HasLanguage(cfg *AuditConfig, lang string) bool
- func IsTestFile(path string) bool
- func ReadVxIgnore(path string) []string
- func ShannonEntropy(s string) float64
- func WalkFiles(root string, ignore []string, extensions []string) ([]string, error)
- type AuditConfig
- type AuthConfig
- type CodeVulns
- type Deps
- type EnvFiles
- type LocalModule
- type Secrets
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func DetectLanguages ¶
DetectLanguages scans the project root for known marker files.
func HasLanguage ¶
func HasLanguage(cfg *AuditConfig, lang string) bool
HasLanguage checks if a language is in the detected set.
func IsTestFile ¶
IsTestFile checks if a file path looks like a test file.
func ReadVxIgnore ¶
ReadVxIgnore parses a .vxignore file and returns the patterns.
func ShannonEntropy ¶
ShannonEntropy computes the Shannon entropy of a string.
Types ¶
type AuditConfig ¶
type AuditConfig struct {
Path string
Languages []string // auto-detected: "php", "typescript", "javascript", "go", "java", "python", "rust"
Verbose bool
}
AuditConfig holds configuration for local audit runs.
type AuthConfig ¶
type AuthConfig struct{}
AuthConfig audits authentication and framework security configuration.
func (*AuthConfig) Description ¶
func (a *AuthConfig) Description() string
func (*AuthConfig) Name ¶
func (a *AuthConfig) Name() string
func (*AuthConfig) Run ¶
func (a *AuthConfig) Run(cfg *AuditConfig) ([]engine.Finding, error)
type CodeVulns ¶
type CodeVulns struct{}
CodeVulns scans source code for common vulnerability patterns.
func (*CodeVulns) Description ¶
type Deps ¶
type Deps struct{}
Deps scans project dependencies for known vulnerabilities via OSV.dev.
func (*Deps) Description ¶
type EnvFiles ¶
type EnvFiles struct{}
EnvFiles audits environment files for security issues.
func (*EnvFiles) Description ¶
type LocalModule ¶
type LocalModule interface {
Name() string
Description() string
Run(cfg *AuditConfig) ([]engine.Finding, error)
}
LocalModule defines the interface for local audit modules.
type Secrets ¶
type Secrets struct{}
Secrets detects hardcoded secrets, API keys, and high-entropy strings in source files.
Source Files