Skip to main content

Static security code scanner (SAST) for Node.js applications

Project description

# NodeJsScan

Static security code scanner (SAST) for Node.js applications.

### Configure & Install NodeJsScan UI

1. Install Postgres and configure `SQLALCHEMY_DATABASE_URI` in `core/`
2. Run `pip install -r requirements.txt`
3. Run `python`
4. Run `python`

This will run NodeJsScan on ``
If you need to debug, set `DEBUG = True` in `core/`

### NodeJsScan CLI

The command line interface (CLI) allows you to integrate NodeJsScan with DevSecOps CI/CD pipelines. The results are in JSON format. When you use CLI the results are never stored with NodeJsScan backend.

pip install -e git+
usage: nodejsscan [-h] [-d DIRECTORY [DIRECTORY ...]] [-o OUTPUT]

optional arguments:
-h, --help show this help message and exit
Node.js source code directory to scan
-o OUTPUT, --output OUTPUT
Output file to save JSON report

### Learn Node.js Security: Pentesting and Exploitation
[OpSecX Video Course](

### Docker

docker build -t nodejsscan .
docker run -it -p 9090:9090 nodejsscan

### DockerHub

docker pull opensecurity/nodejsscan
docker run -it -p 9090:9090 opensecurity/nodejsscan:latest

#### NodeJsScan Web UI
![NodeJsScan V2](

#### Static Analysis
![NodeJsScan Static Scan Results](
![NodeJsScan Static Scan Vulnerability Details](

Project details

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distributions

No source distribution files available for this release.See tutorial on generating distribution archives.

Built Distributions

nodejsscan-2.6-py2.7.egg (23.6 kB view hashes)

Uploaded Source

nodejsscan-2.6-py2-none-any.whl (17.0 kB view hashes)

Uploaded Python 2

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page