huskyCI
1.0.0
本文也可以在巴西葡萄牙语中阅读。
Huskyci是一种开源工具，可以协调安全测试，并将所有结果集中到数据库中，以进行进一步的分析和指标。它可以在Python（Bandit and Safety），Ruby（Brakeman），JavaScript（NPM审核和纱线审核），Golang（GOSEC），Java（Spotbugs Plus查找SEC错误）和HCL（TFSEC）中执行静态安全分析。它还可以审核存储库，例如AWS Secret Keys，Private SSH Keys和许多其他使用Gitleaks的秘密。
开发人员可以在CI管道中设置一个新阶段以检查漏洞：
如果在代码中发现了安全问题，则可以显示以下情况：
[HUSKYCI][*] poc-python-bandit -> https://github.com/globocom/huskyCI.git
[HUSKYCI][*] huskyCI analysis started! yDS9tb9mdt4QnnyvOBp3eVAXE1nWpTRQ
[HUSKYCI][!] Title: Use of exec detected.
[HUSKYCI][!] Language: Python
[HUSKYCI][!] Tool: Bandit
[HUSKYCI][!] Severity: MEDIUM
[HUSKYCI][!] Confidence: HIGH
[HUSKYCI][!] Details: Use of exec detected.
[HUSKYCI][!] File: ./main.py
[HUSKYCI][!] Line: 7
[HUSKYCI][!] Code:
6
7 exec(command)
8
[HUSKYCI][!] Title: Possible hardcoded password: 'password123!'
[HUSKYCI][!] Language: Python
[HUSKYCI][!] Tool: Bandit
[HUSKYCI][!] Severity: LOW
[HUSKYCI][!] Confidence: MEDIUM
[HUSKYCI][!] Details: Possible hardcoded password: 'password123!'
[HUSKYCI][!] File: ./main.py
[HUSKYCI][!] Line: 1
[HUSKYCI][!] Code:
1 secret = 'password123!'
2
3 password = 'thisisnotapassword' #nohusky
4
[HUSKYCI][SUMMARY] Python -> huskyci/bandit:1.6.2
[HUSKYCI][SUMMARY] High: 0
[HUSKYCI][SUMMARY] Medium: 1
[HUSKYCI][SUMMARY] Low: 1
[HUSKYCI][SUMMARY] NoSecHusky: 1
[HUSKYCI][SUMMARY] Total
[HUSKYCI][SUMMARY] High: 0
[HUSKYCI][SUMMARY] Medium: 1
[HUSKYCI][SUMMARY] Low: 1
[HUSKYCI][SUMMARY] NoSecHusky: 1
[HUSKYCI][*] The following securityTests were executed and no blocking vulnerabilities were found:
[HUSKYCI][*] [huskyci/gitleaks:2.1.0]
[HUSKYCI][*] Some HIGH/MEDIUM issues were found in these securityTests:
[HUSKYCI][*] [huskyci/bandit:1.6.2]
ERROR: Job failed: exit code 190
您可以使用Docker撰写本指南来尝试Huskyci，以建立本地环境。
所有指南和完整文档都可以在官方文档页面中找到。
阅读我们的贡献指南，以了解我们的开发过程，如何提出错误的文件和改进以及如何构建和测试您对Huskyci的变化。
我们有一些联系渠道，请随时与我们联系：
Rafaveira3 | 克里尔 | Spimpaov | Joserenatosilva | Gabriel-Cantergiani |
Marcelomagina | Nettoclaudio | Edersonbrilhante | Gabhendm | mdjunior |
fguisso | Vitoriario | Rodrigo-Brito | Gustavocovas | abzcoding |
lzakharov | itepifanio | Victorpalmeira | 融化 | Localleon |
吉米1134 | Henriquebonadio-zz | vfiebig | 吉特·巴格（Gitter Badger） | Renatoaquino |
raytdc | Rafaelrubbioli | Rafaelsq | ragoso | Aranhams |
该项目的存在得益于所有贡献者。你摇滚！ ❤️
Huskyci获得了BSD 3句“新”或“修订”许可证的许可。
