puma-scan
Puma Scan is a software security Visual Studio extension that provides real time, continuous source code analysis as development teams write code. Vulnerabilities are immediately displayed in the development environment as spell check and compiler warnings, preventing security bugs from entering your applications.
File Explorer
Download Latest Version (.zip)- publish-parser.ps1
- set-installer-version.ps1
- sign-extension.ps1
- Dockerfile
- pumascan.sh
- Rules.json
- PumaLog.cs
- PumaLogEntry.cs
- ErrorCode.cs
- Options.cs
- CommonWeaknessEnumeration.cs
- DiagnosticSeverity.cs
- ReportSeverity.cs
- Rule.cs
- Snippet.cs
- IRuleProvider.cs
- RuleProvider.cs
- PumaLogConverter.cs
- Program.cs
- Puma.Security.Parser.csproj
- RegexConstants.cs
- IAuthorizeExpressionAnalyzer.cs
- MvcCoreAuthorizeExpressionAnalyzer.cs
- AuthorizeAnalyzer.cs
- IJwtSignatureExpressionAnalyzer.cs
- JwtSignatureExpressionAnalyzer.cs
- JwtSignatureAnalyzer.cs
- CompilationAnalyzer.cs
- HttpOnlyAnalyzer.cs
- RequireSslAnalyzer.cs
- CorsExpressionAnalyzer.cs
- ICorsExpressionAnalyzer.cs
- CorsAllowAnyOriginAnalyzer.cs
- CustomErrorsAnalyzer.cs
- CookielessAnalyzer.cs
- CrossAppRedirectAnalyzer.cs
- ProtectionAnalyzer.cs
- RequireSslAnalyzer.cs
- TimeoutAnalyzer.cs
- HeaderCheckingAnalyzer.cs
- VersionHeaderAnalyzer.cs
- IPasswordLockoutExpressionAnalyzer.cs
- IPasswordValidatorExpressionAnalyzer.cs
- PasswordLockoutExpressionAnalyzer.cs
- PasswordValidatorExpressionAnalyzer.cs
- PasswordLockoutAnalyzer.cs
- PasswordValidatorAnalyzer.cs
- MachineKeyAnalyzer.cs
- EventValidationAnalyzer.cs
- ValidateRequestAnalyzer.cs
- ViewStateEncryptionModeAnalyzer.cs
- ViewStateMacAnalyzer.cs
- ModeAnalyzer.cs
- TimeoutAnalyzer.cs
- ArgumentVulnerableSyntaxNodeFactory.cs
- AssignmentExpressionVulnerableSyntaxNodeFactory.cs
- AttributeVulnerableSyntaxNodeFactory.cs
- BinaryFormatterExpressionVulnerableSyntaxNodeFactory.cs
- IArgumentVulnerableSyntaxNodeFactory.cs
- IAssignmentExpressionVulnerableSyntaxNodeFactory.cs
- IAttributeVulnerableSyntaxNodeFactory.cs
- IBinaryFormatterExpressionVulnerableSyntaxNodeFactory.cs
- IdentifierNameVulnerableSyntaxNodeFactory.cs
- IIdentifierNameVulnerableSyntaxNodeFactory.cs
- IInvocationExpressionVulnerableSyntaxNodeFactory.cs
- ILocalDeclarationStatementVulnerableSyntaxNodeFactory.cs
- InvocationExpressionVulnerableSyntaxNodeFactory.cs
- IObjectCreationExpressionVulnerableSyntaxNodeFactory.cs
- IVulnerableSyntaxNodeFactory.cs
- LocalDeclarationStatementVulnerableSyntaxNodeFactory.cs
- ObjectCreationExpressionVulnerableSyntaxNodeFactory.cs
- IsArgumentOnlyExpression.cs
- ArgumentListSyntaxAnalyzer.cs
- ArgumentSyntaxNodeAnalyzer.cs
- BaseCodeBlockAnalyzer.cs
- BaseConfigurationFileAnalyzer.cs
- BaseMarkupFileAnalyzer.cs
- BaseSemanticAnalyzer.cs
- BaseSyntaxNodeAnalyzer.cs
- BinaryExpressionSyntaxAnalyzer.cs
- CleansedMethodsProvider.cs
- ConditionalExpressionSyntaxAnalyzer.cs
- ElementAccessExpressionSyntaxAnalyzer.cs
- ICleansedMethodsProvider.cs
- IdentifierNameSyntaxAnalyzer.cs
- InvocationExpressionSyntaxAnalyzer.cs
- ISafeSyntaxTypeAnalyzer.cs
- ISanitizedFieldSymbolAnalyzer.cs
- ISanitizedLocalSymbolAnalyzer.cs
- ISanitizedMethodSymbolAnalyzer.cs
- ISanitizedParameterSymbolAnalyzer.cs
- ISanitizedPropertySymbolAnalyzer.cs
- ISanitizedSourceAnalyzer.cs
- ISyntaxNodeAnalyzer.cs
- LiteralExpressionSyntaxAnalyzer.cs
- MemberAccessExpressionSyntaxAnalyzer.cs
- ParameterSyntaxNodeAnalyzer.cs
- QueryExpressionSyntaxAnalyzer.cs
- SafeSyntaxTypeAnalyzer.cs
- SanitizedFieldSymbolAnalyzer.cs
- SanitizedLocalSymbolAnalyzer.cs
- SanitizedMethodSymbolAnalyzer.cs
- SanitizedParameterSymbolAnalyzer.cs
- SanitizedPropertySymbolAnalyzer.cs
- SanitizedSourceAnalyzer.cs
- SyntaxNodeAnalyzer.cs
- SyntaxNodeAnalyzerFactory.cs
- VulnerableSyntaxNode.cs
- DesExpressionAnalyzer.cs
- EcbAssignmentExpressionAnalyzer.cs
- IDesExpressionAnalzyer.cs
- IEcbAssignmentExpressionAnalyzer.cs
- IMd5ExpressionAnalzyer.cs
- ISha1ExpressionAnalzyer.cs
- ISystemRandomExpressionAnalyzer.cs
- Md5ExpressionAnalyzer.cs
- Sha1ExpressionAnalyzer.cs
- SystemRandomExpressionAnalyzer.cs
- DesDiagnosticAnalyzer.cs
- EcbDiagnosticAnalyzer.cs
- Md5DiagnosticAnalyzer.cs
- Sha1DiagnosticAnalyzer.cs
- SystemRandomDiagnosticAnalyzer.cs
- IProcessStartInfoCreationExpressionAnalyzer.cs
- IProcessStartInvocationExpressionAnalyzer.cs
- ProcessStartInfoCreationExpressionAnalyzer.cs
- ProcessStartInvocationExpressionAnalyzer.cs
- ProcessStartInfoCreationAnalyzer.cs
- ProcessStartInvocationAnalyzer.cs
- BinaryFormatterExpressionAnalyzer.cs
- IBinaryFormatterExpressionAnalyzer.cs
- INewtonsoftJsonTypeNameHandlingExpressionAnalyzer.cs
- NewtonsoftJsonTypeNameHandlingExpressionAnalyzer.cs
- BinaryFormatterAnalyzer.cs
- NewtonsoftJsonTypeNameHandlingAnalyzer.cs
- ILdapDirectoryEntryPathAssignmentInjectionExpressionAnalyzer.cs
- ILdapDirectoryEntryPathInjectionExpressionAnalyzer.cs
- ILdapDirectorySearcherCreationExpressionAnalyzer.cs
- ILdapDirectorySearcherFilterAssignmentExpressionAnalyzer.cs
- LdapDirectoryEntryPathAssignmentInjectionExpressionAnalyzer.cs
- LdapDirectoryEntryPathInjectionExpressionAnalyzer.cs
- LdapDirectorySearcherCreationExpressionAnalyzer.cs
- LdapDirectorySearcherFilterAssignmentExpressionAnalyzer.cs
- LdapDirectoryEntryPathAssignmentAnalzyer.cs
- LdapDirectoryEntryPathCreationAnalyzer.cs
- LdapDirectorySearcherCreationAnalyzer.cs
- LdapDirectorySearcherFilterAssignmentAnalyzer.cs
- EfQueryCommandInjectionExpressionAnalyzer.cs
- IEfQueryCommandInjectionExpressionAnalyzer.cs
- ILinqSqlInjectionExpressionAnalyzer.cs
- ISqlCommandInjectionAssignmentExpressionAnalyzer.cs
- ISqlCommandInjectionObjectCreationExpressionAnalyzer.cs
- ISqlCommandObjectCreationExpressionVulnerableSyntaxNodeFactory.cs
- LinqSqlInjectionExpressionAnalyzer.cs
- SqlCommandInjectionAssignmentExpressionAnalyzer.cs
- SqlCommandInjectionObjectCreationExpressionAnalyzer.cs
- SqlCommandObjectCreationExpressionVulnerableSyntaxNodeFactory.cs
- EfQueryInjectionAnalyzer.cs
- LinqSqlInjectionAnalyzer.cs
- SqlCommandInjectionAssignmentAnalyzer.cs
- SqlCommandInjectionObjectCreationAnalyzer.cs
- ILabelTextAssignmentExpressionAnalyzer.cs
- ILiteralTextAssignmentExpressionAnalyzer.cs
- IResponseWriteAssignmentExpressionAnalyzer.cs
- LabelTextAssignmentExpressionAnalyzer.cs
- LiteralTextAssignmentExpressionAnalyzer.cs
- ResponseWriteAssignmentExpressionAnalyzer.cs
- DataBindExpressionAnalyzer.cs
- HtmlRawAnalyzer.cs
- LabelTextAnalyzer.cs
- LiteralTextAnalyzer.cs
- ResponseWriteAnalyzer.cs
- ResponseWriteShortHandAnalyzer.cs
- WriteLiteralAnalyzer.cs
- HttpClientHandlerCertificateValidationExpressionAnalyzer.cs
- HttpWebRequestCertificateValidationExpressionAnalyzer.cs
- IHttpClientHandlerCertificateValidationExpressionAnalyzer.cs
- IHttpWebRequestCertificateValidationExpressionAnalyzer.cs
- IServicePointManagerCertificateValidationExpressionAnalyzer.cs
- IWebRequestHandlerCertificateValidationExpressionAnalyzer.cs
- ServicePointManagerCertificateValidationExpressionAnalyzer.cs
- WebRequestHandlerCertificateValidationExpressionAnalyzer.cs
- CertificateValidationAnalyzer.cs
- CertificateValidationSimpleAssignmentAnalyzer.cs
- AntiForgeryTokenExpressionAnalyzer.cs
- IAntiForgeryTokenExpressionAnalyzer.cs
- AntiForgeryTokenAnalyzer.cs
- FileDeleteExpressionAnalyzer.cs
- FileOpenExpressionAnalyzer.cs
- FileReadExpressionAnalyzer.cs
- FileStreamExpressionAnalyzer.cs
- FileWriteExpressionAnalyzer.cs
- IFileDeleteExpressionAnalyzer.cs
- IFileOpenExpressionAnalyzer.cs
- IFileReadExpressionAnalyzer.cs
- IFileStreamExpressionAnalyzer.cs
- IFileWriteExpressionAnalyzer.cs
- IMvcFileResultExpressionAnalyzer.cs
- MvcFileResultExpressionAnalyzer.cs
- FilePathResultAnalyzer.cs
- FileStreamAnalyzer.cs
- IOFileAnalyzer.cs
- IMvcRedirectExpressionAnalyzer.cs
- IResponseRedirectExpressionAnalyzer.cs
- MvcRedirectExpressionAnalyzer.cs
- ResponseRedirectExpressionAnalyzer.cs
- MvcRedirectAnalyzer.cs
- ResponseRedirectAnalyzer.cs
- AllowHtmlExpressionAnalyzer.cs
- IAllowHtmlExpressionAnalyzer.cs
- IValidateInputExpressionAnalyzer.cs
- ValidateInputExpressionAnalyzer.cs
- AllowHtmlAnalyzer.cs
- ValidateInputAnalyzer.cs
- CompilationAnalyzerExtensions.cs
- IAdditionalTextAnalyzer.cs
- ICompilationAnalyzer.cs
- IConfigurationFileAnalyzer.cs
- ISyntaxAnalyzer.cs
- AssemblyExtensions.cs
- AssignmentExpressionExtensions.cs
- ConfigurationFileExtensions.cs
- DiagnosticIdExtensions.cs
- ExpressionSyntaxExtensions.cs
- MethodDeclarationSyntaxExtensions.cs
- MethodSymbolExtensions.cs
- NamedTypeSymbolExtensions.cs
- SyntaxNodeExtensions.cs
- Enum.cs
- Utils.cs
- CleanseMethod.cs
- TaintFlags.cs
- ConfigurationFileParser.cs
- ConfigurationFileTransformCommand.cs
- ShouldUpdateConfigurationFile.cs
- AdditionalTextAnalyzerRegisterService.cs
- ConfigurationFileAnalyzerRegisterService.cs
- DiagnosticSuite.cs
- IAdditionalTextAnalyzerRegisterService.cs
- IConfigurationFileAnalyzerRegisterService.cs
- IPumaSyntaxNodeAnalysisContextReporterService.cs
- ISyntaxNodeAnalyzerRegisterService.cs
- PumaCompilationAnalysisContext.cs
- PumaSyntaxNodeAnalysisContextReporterService.cs
- SyntaxNodeAnalyzerRegisterService.cs
- DiagnosticDescriptorFactory.cs
- DiagnosticFactory.cs
- SupportedDiagnosticAttribute.cs
- ConfigurationFileFilter.cs
- IFileExtensionFilter.cs
- MvcMarkupFileFilter.cs
- WebFormMarkupFileFilter.cs
- ConfigurationFile.cs
- DiagnosticInfo.cs
- MarkupFile.cs
- HtmlRawRegexHelper.cs
- WriteLiteralRegexHelper.cs
- DataBindingExpressionRegexHelper.cs
- ResponseWriteShortHandRegexHelper.cs
- BaseRegexHelper.cs
- IRegexHelper.cs
- AccessControlAnalyzerSuiteFactory.cs
- CertificateValidationAnalyzerSuiteFactory.cs
- CommandInjectionAnalyzerSuiteFactory.cs
- ConfigurationAnalyzerSuiteFactory.cs
- CookiesConfigurationAnalyzerSuiteFactory.cs
- CryptoAnalyzerSuiteFactory.cs
- CsrfAnalyzerSuiteFactory.cs
- DeserializationAnalyzerSuiteFactory.cs
- FormsConfigurationAnalyzerSuiteFactory.cs
- HttpRuntimeConfigurationAnalyzerSuiteFactory.cs
- IAnalyzerSuiteFactory.cs
- IdentityAnalyzerSuiteFactory.cs
- LdapInjectionAnalyzerSuiteFactory.cs
- MvcMarkupAnalyzerSuiteFactory.cs
- PagesConfigurationAnalyzerSuiteFactory.cs
- PathTamperingAnalyzerSuiteFactory.cs
- RequestValidationAnalyzerSuiteFactory.cs
- SessionStateConfigurationAnalyzerSuiteFactory.cs
- SqlInjectionAnalyzerSuiteFactory.cs
- UnvalidatedRedirectAnalyzerSuiteFactory.cs
- WebFormsMarkupAnalyzerSuiteFactory.cs
- WebFormsXssAnalyzerSuiteFactory.cs
- PumaDiagnosticSuite.cs
- README.md
- install.ps1
- uninstall.ps1
- Puma.Security.Rules.csproj
- PumaApp.cs
- PumaAppBuilder.cs
- Resources.Designer.cs
- Resources.resx
- RuleOptions.cs
- CertificateValidationTests.cs
- EfQueryInjectionTests.cs
- PathTamperingTests.cs
- RedirectTests.cs
- SanitizerTests.cs
- SqlCommandInjectionTests.cs
- PumaVerifier.cs
- Puma.Security.Rules.Test.csproj
- AssemblyInfo.cs
- overview.md
- publishManifest.json
- License.txt
- logo-200x200.png
- packages.config
- Puma.Security.Rules.Vsix.VS2022.csproj
- source.extension.vsixmanifest
- .gitattributes
- .gitignore
- .pumafile
- CONTRIBUTING.md
- LICENSE
- PumaScan.sln
- README.md
# Installation Guide
1. Get the code
git clone https://github.com/pumasecurity/puma-scan
Downloads the entire project code from GitHub to your computer.
cd puma-scan
Moves into the project folder you just downloaded.
2. Docker
Easy RecommendedPrerequisites
- Git Needed to download the project code from GitHub.
- Docker Desktop Needed to build and run containers. Install it and keep it running in the background.
docker build -f docker/Dockerfile -t puma-scan .
Builds a runnable image based on the Dockerfile.
docker run -p 8080:80 puma-scan
Runs the built image as an actual container.
Run docker compose ps to check the containers are Up. If the README mentions a port, open http://localhost:PORT in your browser.
3. .NET
MediumPrerequisites
cd Puma.Security.Parser
This project's files live in a subfolder, so move into it first.
dotnet restore
Downloads the packages the project depends on.
dotnet run
Builds the project and runs it immediately.
After dotnet run, check the message or address shown in the terminal.
// repository documentation
Was this content helpful?
(0 ratings)
