Skip to content

feat(cli): emit SARIF natively, and detect the code-level vulnerability classes #73

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
ralyodio merged 2 commits into from
Aug 3, 2026
Merged

feat(cli): emit SARIF natively, and detect the code-level vulnerability classes #73

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
a574b3b
feat(cli): emit SARIF natively, and detect the code-level classes
ralyodio Aug 3, 2026
4342b82
fix(cli): update the root lockfile, and close a TOCTOU in the walker
ralyodio Aug 3, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions apps/cli/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -94,6 +94,7 @@ threatcrush # Get started
threatcrush monitor # Real-time security monitoring (all ports)
threatcrush tui # Interactive dashboard (htop for security)
threatcrush scan ./src # Scan code for vulnerabilities & secrets
threatcrush scan . --format sarif --output out.sarif --fail-on critical,high
threatcrush pentest URL # Penetration test a URL/API
threatcrush init # Auto-detect services, generate config
threatcrush status # Show daemon status & loaded modules
Expand Down
9 changes: 6 additions & 3 deletions apps/cli/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
{
"name": "@profullstack/threatcrush",
"version": "0.2.2",
"description": "All-in-one security agent daemon — monitor, detect, scan, and protect servers in real-time",
"description": "All-in-one security agent daemon \u2014 monitor, detect, scan, and protect servers in real-time",
"bin": {
"threatcrush": "./dist/index.js"
},
Expand All @@ -11,7 +11,9 @@
"scripts": {
"build": "tsup",
"dev": "tsup --watch",
"start": "node dist/index.js"
"start": "node dist/index.js",
"test": "vitest run",
"test:watch": "vitest"
},
"keywords": [
"security",
Expand Down Expand Up @@ -52,7 +54,8 @@
"@types/nodemailer": "^6.4.17",
"@types/react": "^18.3.12",
"tsup": "^8.5.1",
"typescript": "^5.9.3"
"typescript": "^5.9.3",
"vitest": "^3.0.0"
},
"repository": {
"type": "git",
Expand Down
Loading
Loading