puma-scan
Puma Scan is a software security Visual Studio extension that provides real time, continuous source code analysis as development teams write code. Vulnerabilities are immediately displayed in the development environment as spell check and compiler warnings, preventing security bugs from entering your applications.
파일 탐색기
최종 버전 다운로드 (.zip)- publish-parser.ps1
- set-installer-version.ps1
- sign-extension.ps1
- Dockerfile
- pumascan.sh
- Rules.json
- PumaLog.cs
- PumaLogEntry.cs
- ErrorCode.cs
- Options.cs
- CommonWeaknessEnumeration.cs
- DiagnosticSeverity.cs
- ReportSeverity.cs
- Rule.cs
- Snippet.cs
- IRuleProvider.cs
- RuleProvider.cs
- PumaLogConverter.cs
- Program.cs
- Puma.Security.Parser.csproj
- RegexConstants.cs
- IAuthorizeExpressionAnalyzer.cs
- MvcCoreAuthorizeExpressionAnalyzer.cs
- AuthorizeAnalyzer.cs
- IJwtSignatureExpressionAnalyzer.cs
- JwtSignatureExpressionAnalyzer.cs
- JwtSignatureAnalyzer.cs
- CompilationAnalyzer.cs
- HttpOnlyAnalyzer.cs
- RequireSslAnalyzer.cs
- CorsExpressionAnalyzer.cs
- ICorsExpressionAnalyzer.cs
- CorsAllowAnyOriginAnalyzer.cs
- CustomErrorsAnalyzer.cs
- CookielessAnalyzer.cs
- CrossAppRedirectAnalyzer.cs
- ProtectionAnalyzer.cs
- RequireSslAnalyzer.cs
- TimeoutAnalyzer.cs
- HeaderCheckingAnalyzer.cs
- VersionHeaderAnalyzer.cs
- IPasswordLockoutExpressionAnalyzer.cs
- IPasswordValidatorExpressionAnalyzer.cs
- PasswordLockoutExpressionAnalyzer.cs
- PasswordValidatorExpressionAnalyzer.cs
- PasswordLockoutAnalyzer.cs
- PasswordValidatorAnalyzer.cs
- MachineKeyAnalyzer.cs
- EventValidationAnalyzer.cs
- ValidateRequestAnalyzer.cs
- ViewStateEncryptionModeAnalyzer.cs
- ViewStateMacAnalyzer.cs
- ModeAnalyzer.cs
- TimeoutAnalyzer.cs
- ArgumentVulnerableSyntaxNodeFactory.cs
- AssignmentExpressionVulnerableSyntaxNodeFactory.cs
- AttributeVulnerableSyntaxNodeFactory.cs
- BinaryFormatterExpressionVulnerableSyntaxNodeFactory.cs
- IArgumentVulnerableSyntaxNodeFactory.cs
- IAssignmentExpressionVulnerableSyntaxNodeFactory.cs
- IAttributeVulnerableSyntaxNodeFactory.cs
- IBinaryFormatterExpressionVulnerableSyntaxNodeFactory.cs
- IdentifierNameVulnerableSyntaxNodeFactory.cs
- IIdentifierNameVulnerableSyntaxNodeFactory.cs
- IInvocationExpressionVulnerableSyntaxNodeFactory.cs
- ILocalDeclarationStatementVulnerableSyntaxNodeFactory.cs
- InvocationExpressionVulnerableSyntaxNodeFactory.cs
- IObjectCreationExpressionVulnerableSyntaxNodeFactory.cs
- IVulnerableSyntaxNodeFactory.cs
- LocalDeclarationStatementVulnerableSyntaxNodeFactory.cs
- ObjectCreationExpressionVulnerableSyntaxNodeFactory.cs
- IsArgumentOnlyExpression.cs
- ArgumentListSyntaxAnalyzer.cs
- ArgumentSyntaxNodeAnalyzer.cs
- BaseCodeBlockAnalyzer.cs
- BaseConfigurationFileAnalyzer.cs
- BaseMarkupFileAnalyzer.cs
- BaseSemanticAnalyzer.cs
- BaseSyntaxNodeAnalyzer.cs
- BinaryExpressionSyntaxAnalyzer.cs
- CleansedMethodsProvider.cs
- ConditionalExpressionSyntaxAnalyzer.cs
- ElementAccessExpressionSyntaxAnalyzer.cs
- ICleansedMethodsProvider.cs
- IdentifierNameSyntaxAnalyzer.cs
- InvocationExpressionSyntaxAnalyzer.cs
- ISafeSyntaxTypeAnalyzer.cs
- ISanitizedFieldSymbolAnalyzer.cs
- ISanitizedLocalSymbolAnalyzer.cs
- ISanitizedMethodSymbolAnalyzer.cs
- ISanitizedParameterSymbolAnalyzer.cs
- ISanitizedPropertySymbolAnalyzer.cs
- ISanitizedSourceAnalyzer.cs
- ISyntaxNodeAnalyzer.cs
- LiteralExpressionSyntaxAnalyzer.cs
- MemberAccessExpressionSyntaxAnalyzer.cs
- ParameterSyntaxNodeAnalyzer.cs
- QueryExpressionSyntaxAnalyzer.cs
- SafeSyntaxTypeAnalyzer.cs
- SanitizedFieldSymbolAnalyzer.cs
- SanitizedLocalSymbolAnalyzer.cs
- SanitizedMethodSymbolAnalyzer.cs
- SanitizedParameterSymbolAnalyzer.cs
- SanitizedPropertySymbolAnalyzer.cs
- SanitizedSourceAnalyzer.cs
- SyntaxNodeAnalyzer.cs
- SyntaxNodeAnalyzerFactory.cs
- VulnerableSyntaxNode.cs
- DesExpressionAnalyzer.cs
- EcbAssignmentExpressionAnalyzer.cs
- IDesExpressionAnalzyer.cs
- IEcbAssignmentExpressionAnalyzer.cs
- IMd5ExpressionAnalzyer.cs
- ISha1ExpressionAnalzyer.cs
- ISystemRandomExpressionAnalyzer.cs
- Md5ExpressionAnalyzer.cs
- Sha1ExpressionAnalyzer.cs
- SystemRandomExpressionAnalyzer.cs
- DesDiagnosticAnalyzer.cs
- EcbDiagnosticAnalyzer.cs
- Md5DiagnosticAnalyzer.cs
- Sha1DiagnosticAnalyzer.cs
- SystemRandomDiagnosticAnalyzer.cs
- IProcessStartInfoCreationExpressionAnalyzer.cs
- IProcessStartInvocationExpressionAnalyzer.cs
- ProcessStartInfoCreationExpressionAnalyzer.cs
- ProcessStartInvocationExpressionAnalyzer.cs
- ProcessStartInfoCreationAnalyzer.cs
- ProcessStartInvocationAnalyzer.cs
- BinaryFormatterExpressionAnalyzer.cs
- IBinaryFormatterExpressionAnalyzer.cs
- INewtonsoftJsonTypeNameHandlingExpressionAnalyzer.cs
- NewtonsoftJsonTypeNameHandlingExpressionAnalyzer.cs
- BinaryFormatterAnalyzer.cs
- NewtonsoftJsonTypeNameHandlingAnalyzer.cs
- ILdapDirectoryEntryPathAssignmentInjectionExpressionAnalyzer.cs
- ILdapDirectoryEntryPathInjectionExpressionAnalyzer.cs
- ILdapDirectorySearcherCreationExpressionAnalyzer.cs
- ILdapDirectorySearcherFilterAssignmentExpressionAnalyzer.cs
- LdapDirectoryEntryPathAssignmentInjectionExpressionAnalyzer.cs
- LdapDirectoryEntryPathInjectionExpressionAnalyzer.cs
- LdapDirectorySearcherCreationExpressionAnalyzer.cs
- LdapDirectorySearcherFilterAssignmentExpressionAnalyzer.cs
- LdapDirectoryEntryPathAssignmentAnalzyer.cs
- LdapDirectoryEntryPathCreationAnalyzer.cs
- LdapDirectorySearcherCreationAnalyzer.cs
- LdapDirectorySearcherFilterAssignmentAnalyzer.cs
- EfQueryCommandInjectionExpressionAnalyzer.cs
- IEfQueryCommandInjectionExpressionAnalyzer.cs
- ILinqSqlInjectionExpressionAnalyzer.cs
- ISqlCommandInjectionAssignmentExpressionAnalyzer.cs
- ISqlCommandInjectionObjectCreationExpressionAnalyzer.cs
- ISqlCommandObjectCreationExpressionVulnerableSyntaxNodeFactory.cs
- LinqSqlInjectionExpressionAnalyzer.cs
- SqlCommandInjectionAssignmentExpressionAnalyzer.cs
- SqlCommandInjectionObjectCreationExpressionAnalyzer.cs
- SqlCommandObjectCreationExpressionVulnerableSyntaxNodeFactory.cs
- EfQueryInjectionAnalyzer.cs
- LinqSqlInjectionAnalyzer.cs
- SqlCommandInjectionAssignmentAnalyzer.cs
- SqlCommandInjectionObjectCreationAnalyzer.cs
- ILabelTextAssignmentExpressionAnalyzer.cs
- ILiteralTextAssignmentExpressionAnalyzer.cs
- IResponseWriteAssignmentExpressionAnalyzer.cs
- LabelTextAssignmentExpressionAnalyzer.cs
- LiteralTextAssignmentExpressionAnalyzer.cs
- ResponseWriteAssignmentExpressionAnalyzer.cs
- DataBindExpressionAnalyzer.cs
- HtmlRawAnalyzer.cs
- LabelTextAnalyzer.cs
- LiteralTextAnalyzer.cs
- ResponseWriteAnalyzer.cs
- ResponseWriteShortHandAnalyzer.cs
- WriteLiteralAnalyzer.cs
- HttpClientHandlerCertificateValidationExpressionAnalyzer.cs
- HttpWebRequestCertificateValidationExpressionAnalyzer.cs
- IHttpClientHandlerCertificateValidationExpressionAnalyzer.cs
- IHttpWebRequestCertificateValidationExpressionAnalyzer.cs
- IServicePointManagerCertificateValidationExpressionAnalyzer.cs
- IWebRequestHandlerCertificateValidationExpressionAnalyzer.cs
- ServicePointManagerCertificateValidationExpressionAnalyzer.cs
- WebRequestHandlerCertificateValidationExpressionAnalyzer.cs
- CertificateValidationAnalyzer.cs
- CertificateValidationSimpleAssignmentAnalyzer.cs
- AntiForgeryTokenExpressionAnalyzer.cs
- IAntiForgeryTokenExpressionAnalyzer.cs
- AntiForgeryTokenAnalyzer.cs
- FileDeleteExpressionAnalyzer.cs
- FileOpenExpressionAnalyzer.cs
- FileReadExpressionAnalyzer.cs
- FileStreamExpressionAnalyzer.cs
- FileWriteExpressionAnalyzer.cs
- IFileDeleteExpressionAnalyzer.cs
- IFileOpenExpressionAnalyzer.cs
- IFileReadExpressionAnalyzer.cs
- IFileStreamExpressionAnalyzer.cs
- IFileWriteExpressionAnalyzer.cs
- IMvcFileResultExpressionAnalyzer.cs
- MvcFileResultExpressionAnalyzer.cs
- FilePathResultAnalyzer.cs
- FileStreamAnalyzer.cs
- IOFileAnalyzer.cs
- IMvcRedirectExpressionAnalyzer.cs
- IResponseRedirectExpressionAnalyzer.cs
- MvcRedirectExpressionAnalyzer.cs
- ResponseRedirectExpressionAnalyzer.cs
- MvcRedirectAnalyzer.cs
- ResponseRedirectAnalyzer.cs
- AllowHtmlExpressionAnalyzer.cs
- IAllowHtmlExpressionAnalyzer.cs
- IValidateInputExpressionAnalyzer.cs
- ValidateInputExpressionAnalyzer.cs
- AllowHtmlAnalyzer.cs
- ValidateInputAnalyzer.cs
- CompilationAnalyzerExtensions.cs
- IAdditionalTextAnalyzer.cs
- ICompilationAnalyzer.cs
- IConfigurationFileAnalyzer.cs
- ISyntaxAnalyzer.cs
- AssemblyExtensions.cs
- AssignmentExpressionExtensions.cs
- ConfigurationFileExtensions.cs
- DiagnosticIdExtensions.cs
- ExpressionSyntaxExtensions.cs
- MethodDeclarationSyntaxExtensions.cs
- MethodSymbolExtensions.cs
- NamedTypeSymbolExtensions.cs
- SyntaxNodeExtensions.cs
- Enum.cs
- Utils.cs
- CleanseMethod.cs
- TaintFlags.cs
- ConfigurationFileParser.cs
- ConfigurationFileTransformCommand.cs
- ShouldUpdateConfigurationFile.cs
- AdditionalTextAnalyzerRegisterService.cs
- ConfigurationFileAnalyzerRegisterService.cs
- DiagnosticSuite.cs
- IAdditionalTextAnalyzerRegisterService.cs
- IConfigurationFileAnalyzerRegisterService.cs
- IPumaSyntaxNodeAnalysisContextReporterService.cs
- ISyntaxNodeAnalyzerRegisterService.cs
- PumaCompilationAnalysisContext.cs
- PumaSyntaxNodeAnalysisContextReporterService.cs
- SyntaxNodeAnalyzerRegisterService.cs
- DiagnosticDescriptorFactory.cs
- DiagnosticFactory.cs
- SupportedDiagnosticAttribute.cs
- ConfigurationFileFilter.cs
- IFileExtensionFilter.cs
- MvcMarkupFileFilter.cs
- WebFormMarkupFileFilter.cs
- ConfigurationFile.cs
- DiagnosticInfo.cs
- MarkupFile.cs
- HtmlRawRegexHelper.cs
- WriteLiteralRegexHelper.cs
- DataBindingExpressionRegexHelper.cs
- ResponseWriteShortHandRegexHelper.cs
- BaseRegexHelper.cs
- IRegexHelper.cs
- AccessControlAnalyzerSuiteFactory.cs
- CertificateValidationAnalyzerSuiteFactory.cs
- CommandInjectionAnalyzerSuiteFactory.cs
- ConfigurationAnalyzerSuiteFactory.cs
- CookiesConfigurationAnalyzerSuiteFactory.cs
- CryptoAnalyzerSuiteFactory.cs
- CsrfAnalyzerSuiteFactory.cs
- DeserializationAnalyzerSuiteFactory.cs
- FormsConfigurationAnalyzerSuiteFactory.cs
- HttpRuntimeConfigurationAnalyzerSuiteFactory.cs
- IAnalyzerSuiteFactory.cs
- IdentityAnalyzerSuiteFactory.cs
- LdapInjectionAnalyzerSuiteFactory.cs
- MvcMarkupAnalyzerSuiteFactory.cs
- PagesConfigurationAnalyzerSuiteFactory.cs
- PathTamperingAnalyzerSuiteFactory.cs
- RequestValidationAnalyzerSuiteFactory.cs
- SessionStateConfigurationAnalyzerSuiteFactory.cs
- SqlInjectionAnalyzerSuiteFactory.cs
- UnvalidatedRedirectAnalyzerSuiteFactory.cs
- WebFormsMarkupAnalyzerSuiteFactory.cs
- WebFormsXssAnalyzerSuiteFactory.cs
- PumaDiagnosticSuite.cs
- README.md
- install.ps1
- uninstall.ps1
- Puma.Security.Rules.csproj
- PumaApp.cs
- PumaAppBuilder.cs
- Resources.Designer.cs
- Resources.resx
- RuleOptions.cs
- CertificateValidationTests.cs
- EfQueryInjectionTests.cs
- PathTamperingTests.cs
- RedirectTests.cs
- SanitizerTests.cs
- SqlCommandInjectionTests.cs
- PumaVerifier.cs
- Puma.Security.Rules.Test.csproj
- AssemblyInfo.cs
- overview.md
- publishManifest.json
- License.txt
- logo-200x200.png
- packages.config
- Puma.Security.Rules.Vsix.VS2022.csproj
- source.extension.vsixmanifest
- .gitattributes
- .gitignore
- .pumafile
- CONTRIBUTING.md
- LICENSE
- PumaScan.sln
- README.md
# 설치 가이드
1. 코드 내려받기
git clone https://github.com/pumasecurity/puma-scan
깃허브에서 프로젝트 코드 전체를 내 컴퓨터로 내려받습니다.
cd puma-scan
방금 내려받은 프로젝트 폴더 안으로 이동합니다.
2. Docker
쉬움 추천사전 준비물
- Git GitHub에서 프로젝트 코드를 내려받으려면 필요합니다.
- Docker Desktop 컨테이너를 빌드하고 실행하려면 필요합니다. 설치 후 실행해서 백그라운드에 켜두세요.
docker build -f docker/Dockerfile -t puma-scan .
Dockerfile을 기반으로 실행 가능한 이미지를 빌드합니다.
docker run -p 8080:80 puma-scan
빌드된 이미지를 실제 컨테이너로 실행합니다.
터미널에 docker compose ps 를 입력해 컨테이너들이 Up 상태인지 확인하세요. README에 포트 번호가 적혀있다면 브라우저에서 http://localhost:포트번호 로 접속해보세요.
// repository documentation
Was this content helpful?
(0 ratings)
