MokoConsulting/MokoGIT
1
0
Fork 0
Code Issues 146 Pull Requests Releases 96 Wiki Activity

feat(security): code security analysis scanner module #552

New Issue
Closed
opened 2026-06-06 23:20:01 +00:00 by jmiller · 1 comment
jmiller commented 2026-06-06 23:20:01 +00:00
Owner
Copy Link
Copy Source

Add a code scanner module that detects SQL injection, XSS, command injection, and path traversal patterns in source code.

Add a code scanner module that detects SQL injection, XSS, command injection, and path traversal patterns in source code.
jmiller commented 2026-06-28 13:18:11 +00:00
Author
Owner
Copy Link
Copy Source

Implementation complete in PR #716 → dev.

  • New services/security/code_scanner.go — 22 rules across 7 CWE categories (SQL injection, XSS, command injection, path traversal, insecure deserialization, hardcoded credentials, weak cryptography)
  • Language-filtered scanning for Go, PHP, Python, JS/TS, Java, C#, Ruby
  • Wired into orchestrator via existing CodeScanner config toggle
  • API updated: code_scanner field in GET/PATCH security config endpoint
  • Web UI toggle already existed in settings template

Pending merge to dev, then release to main.

Implementation complete in PR #716 → dev. - New `services/security/code_scanner.go` — 22 rules across 7 CWE categories (SQL injection, XSS, command injection, path traversal, insecure deserialization, hardcoded credentials, weak cryptography) - Language-filtered scanning for Go, PHP, Python, JS/TS, Java, C#, Ruby - Wired into orchestrator via existing `CodeScanner` config toggle - API updated: `code_scanner` field in GET/PATCH security config endpoint - Web UI toggle already existed in settings template Pending merge to dev, then release to main.
Sign in to join this conversation.
Labels
Clear labels
breaking-change
Breaking API or behavior change
 ci-cd
CI/CD pipeline changes
 config
Configuration changes
 dependencies
Dependency updates
 deploy-failure
Deployment failed
 docker
Docker/container changes
 documentation
Documentation changes
 feature: wiki
Wiki system enhancements
 good first issue
Good for newcomers
 health-check
Repo health check result
 help wanted
Extra attention needed
 mokostandards
Related to MokoStandards framework
 push-failure
Git push operation failed
 security
Security vulnerability or hardening
 size/l
200-500 lines changed
 size/m
50-200 lines changed
 size/s
10-50 lines changed
 size/xl
500+ lines changed
 size/xs
< 10 lines changed
 standards-drift
Deviates from MokoStandards
 standards-update
MokoStandards compliance update
 sync-failure
Sync or mirror failed
 tech-debt
Technical debt and TODO/FIXME items
 upstream
upstream
Inherited from upstream Gitea
 work-in-progress
Draft or incomplete work
bug
Something is not working
 duplicate
This issue or pull request already exists
 enhancement
New feature
 help wanted
Need some help
 invalid
Something is wrong
 question
More information is needed
 wontfix
This won't be fixed
No labels
Priority -
Type -
Milestone
No items
No Milestone
Assignees
Clear assignees
jmiller (Jonathan Miller) moko-deploy (Moko Deploy Bot)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: MokoConsulting/MokoGIT#552
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?