secuscan 1.1.3

A dual-platform static vulnerability scanner for Android and Web applications.

SecuScan

A dual-platform static vulnerability scanner for Android and Web applications.

Features

• Auto-Detection: Automatically detects if the project is Android or Web.
• Web Scanning: Uses Bandit to find security issues in Python code.
• Android Scanning: Uses MobSF (via Docker) for deep APK analysis.
• Reporting: Output to Console (Rich Table), HTML, or JSON.
• CI/CD Ready: Exit codes for passing/failing builds based on severity.

Getting Started

Option 1: Docker (Easiest)

You can use the pre-built image directly from Docker Hub without installing Python dependencies.

# Pull the latest image
docker pull secuscan/secuscan:latest

# Run a scan (replace /path/to/project with your target)
docker run --rm -it -v ${PWD}:/src secuscan/secuscan:latest scan /src

Option 2: PyPI (Python Package)

Install directly via pip:

pip install secuscan

Option 3: Local Installation

If you prefer to run it from source:

git clone https://github.com/nkuv/SecuScan.git
cd SecuScan
python3 -m venv venv
source venv/bin/activate  # Windows: venv\Scripts\activate
pip install -e .

Option 4: Build from Source

To build the Docker image locally:

docker build -f docker/Dockerfile -t secuscan .
docker run --rm -it -v ${PWD}:/src secuscan scan /src

Usage

Basic Scan

secuscan scan .

Output Formats

secuscan scan . --format table          # Pretty table (default via console)
secuscan scan . --format console        # Text list
secuscan scan . --format json --output report.json
secuscan scan . --format html --output report.html

CI/CD Integration

SecuScan will exit with code 1 if any HIGH or CRITICAL vulnerabilities are found.

steps:
  - name: Security Scan
    uses: docker://secuscan/secuscan:latest
    with:
      args: scan .