axabee/security-scanner repository overview

⁠Security-scanner

Known security vulnerabilities scanner for php and nodejs package managers

⁠Docker image usage

Bind current folder to /src, change workdir to /src and execute security check:

docker run --rm -v `pwd`:/src -w /src axabee/security-scanner

⁠All commands

To perform security check you need change folder execute one of commands:

• security-scanner for multi-scanner, detects package manager files (default docker image command)
• npm audit -> package-lock.json or npm-shrinkwrap.json
• yarn audit -> yarn.lock
• php /security-checker.phar security:check-> composer.lock

⁠Known bugs

npm audit can return: 400 Bad Request - POST https://registry.npmjs.org/-/npm/v1/security/audits because of this bug: https://github.com/npm/npm/issues/20604⁠