code-vuln-audit

# code-vuln-audit A code security scanning tool with three core scanning capabilities: 1. **Dependency Vulnerability Scanning** — Automatically detects known vulnerabilities in npm / pip dependencies 2. **Secret Leak Detection** — Discovers hardcoded secrets, tokens, and passwords via regex matching + Shannon entropy analysis 3. **OWASP Pattern Detection** — Identifies common security anti-patterns such as SQL injection, XSS, command injection, and insecure deserialization ## Quick Start ```bash # Scan the current directory (all checks) python3 scripts/security_scan.py . # Scan dependencies only python3 scripts/security_scan.py --mode deps . # Detect secret leaks only python3 scripts/security_scan.py --mode secrets /path/to/project # Detect OWASP security patterns only python3 scripts/security_scan.py --mode owasp . # Output report in JSON format python3 scripts/security_scan.py --format json --output report.json . # Only show findings at high severity and above python3 scripts/security_scan.py --severity high . ``` ## Scan Module Details ### 1. Dependency Vulnerability Scanning (deps) Automatically detects the project type and invokes the appropriate tool: | Project Type | Detection File | Tool Used | |---|---|---| | Node.js | `package.json` + `package-lock.json` | `npm audit` | | Python | `requirements.txt` / `pyproject.toml` / `Pipfile` | `pip-audit` | If the corresponding audit tool is not installed, a helpful message is displayed instead of an error. ### 2...