nyx-scanner 0.2.0-alpha

A CLI security scanner for automating vulnerability checks
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50

pub mod clean;
pub mod index;
pub mod list;
pub mod scan;

use crate::cli::Commands;
use crate::errors::NyxResult;
use crate::patterns::Severity;
use crate::utils::config::{AnalysisMode, Config};
use std::path::Path;

pub fn handle_command(
    command: Commands,
    database_dir: &Path,
    config: &mut Config,
) -> NyxResult<()> {
    match command {
        Commands::Scan {
            path,
            no_index,
            rebuild_index,
            format,
            high_only,
            ast_only,
            cfg_only,
            all_targets,
        } => {
            if high_only {
                config.scanner.min_severity = Severity::High
            };

            if ast_only {
                config.scanner.mode = AnalysisMode::Ast
            };

            if cfg_only {
                config.scanner.mode = AnalysisMode::Taint
            };

            if all_targets {
                config.scanner.mode = AnalysisMode::Full
            };

            scan::handle(&path, no_index, rebuild_index, format, database_dir, config)
        }
        Commands::Index { action } => index::handle(action, database_dir, config),
        Commands::List { verbose } => list::handle(verbose, database_dir),
        Commands::Clean { project, all } => clean::handle(project, all, database_dir),
    }
}