basiliskscan 1.5.1

BasiliskScan - CLI para varrer projetos e listar dependências vulneráveis ou desatualizadas.

BasiliskScan 🔍

                            ██████╗  █████╗ ███████╗██╗██╗     ██╗███████╗██╗  ██╗
                            ██╔══██╗██╔══██╗██╔════╝██║██║     ██║██╔════╝██║ ██╔╝
                            ██████╔╝███████║███████╗██║██║     ██║███████╗█████╔╝ 
                            ██╔══██╗██╔══██║╚════██║██║██║     ██║╚════██║██╔═██╗ 
                            ██████╔╝██║  ██║███████║██║███████╗██║███████║██║  ██╗
                            ╚═════╝ ╚═╝  ╚═╝╚══════╝╚═╝╚══════╝╚═╝╚══════╝╚═╝  ╚═╝

Advanced CLI for comprehensive dependency and vulnerability analysis in software projects

🇧🇷 Prefer Portuguese? See README.pt-BR.md.

Overview

BasiliskScan is a command-line tool that scans projects, identifies dependencies, checks vulnerability sources, and generates rich HTML reports.

Key Features

• Recursive dependency discovery across supported manifests
• Vulnerability ingestion from OSV, NVD, and Sonatype Guide
• Offline vulnerability database mode
• Rich terminal UI with progress and status feedback
• Interactive HTML report output

Supported Files

• Node.js / Ionic: package.json, package-lock.json, npm-shrinkwrap.json
• Java: pom.xml, build.xml, build.gradle, build.gradle.kts, gradle.lockfile

Installation

Requirements

• Python 3.10 or newer
• pip

Install from PyPI

pip install basiliskscan

Verify Installation

bscan --version
bscan --help

Development Installation

git clone https://github.com/PuertA/basiliskscan.git
cd basiliskscan
pip install -e .

Quick Usage

# Scan current directory
bscan scan

# Scan a specific project
bscan scan --project ./my-app

# Save report with custom name
bscan scan --project ./my-app --output my-report.html

Offline Vulnerability Database

• Default DB path: resources/offline/offline_vulnerabilities.db
• Optional override: BASILISKSCAN_OFFLINE_DB_DIR

# Show local DB status
bscan offline-db --status

# Sync expired components
bscan offline-db --sync

# Force full sync
bscan offline-db --sync --force

# Scan using local data only
bscan scan --offline

Optional Configuration

Create a .env file in the directory where you run bscan:

NVD_API_KEY=your-nvd-api-key

Commands Reference

bscan scan --help
bscan nvd-key --help
bscan nvd-register-guide
bscan sonatype-guide-key --help
bscan offline-db --help

Project Version Updates

python scripts/bump_version.py patch
python scripts/bump_version.py minor
python scripts/bump_version.py major
python scripts/bump_version.py set 1.2.3

License

This project is licensed under the MIT License. See LICENSE.

Contact

• Issues: https://github.com/PuertA/basiliskscan/issues
• Discussions: https://github.com/PuertA/basiliskscan/discussions

---

Built with ❤️ for the developer community.