Update list-tools.sh #74
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI Security Scan | |
| on: | |
| push: | |
| branches: [ main ] | |
| pull_request: | |
| branches: [ main ] | |
| jobs: | |
| security-scan: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - name: Setup ShellCheck | |
| run: sudo apt update && sudo apt install -y shellcheck | |
| - name: ShellCheck Scan | |
| run: | | |
| echo "Running ShellCheck on all shell scripts..." | |
| find tools/ scripts/ -name "*.sh" -exec shellcheck {} \; || true | |
| - name: Set up Python | |
| uses: actions/setup-python@v4 | |
| with: | |
| python-version: '3.9' | |
| - name: Bandit Security Scan | |
| run: | | |
| pip install bandit | |
| bandit -r tools/ -f json -o bandit-results.json || true | |
| - name: Python Syntax Check | |
| run: | | |
| echo "Checking Python syntax..." | |
| python3 -m py_compile tools/utils/osint_lookup.py | |
| python3 -m py_compile tools/analysis/metadata-extractor.py | |
| python3 -m py_compile tools/reconnaissance/theHarvester/run_theharvester.py | |
| - name: Check file permissions | |
| run: | | |
| echo "Checking script permissions..." | |
| find tools/ scripts/ -name "*.sh" -exec test -x {} \; -o -exec echo "Script not executable: {}" \; |