srinathsankara/reporeaver

GitHub: srinathsankara/reporeaver

一款克隆前代码仓库安全扫描器,通过静态分析检测供应链攻击、硬编码密钥、CI/CD 滥用等多种威胁,在代码被拉取或构建前提供安全评估。

Stars: 0 | Forks: 0

# RepoReaver **克隆前代码仓库安全扫描器。** 旨在回答一个问题:*"这个代码库可以安全地被克隆、审查、构建或执行吗?"* [![CI](https://static.pigsec.cn/wp-content/uploads/repos/cas/ad/ad5834178f7599af9fdda11629d49cae07f2997beec49821b2920eff5bfd50e7.svg)](https://github.com/srinathsankara/reporeaver/actions) [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT) [![Python 3.8+](https://img.shields.io/badge/python-3.8+-blue.svg)](https://www.python.org/downloads/) ## 快速开始 ``` pip install reporeaver reporeaver scan ./suspicious-repo reporeaver scan project.zip --html report.html --sarif results.sarif ``` ## 可检测内容 | 类别 | 检测到的威胁 | |----------|-----------------| | **SVG** | XXE,`