tabtin-ai/tabtin/code-safety-audit

# 扫描当前目录（全部检查项）
python3 scripts/security_scan.py .
 
# 仅扫描依赖漏洞
python3 scripts/security_scan.py --mode deps .
 
# 仅检测密钥泄露
python3 scripts/security_scan.py --mode secrets /path/to/project
 
# 仅检测 OWASP 安全模式
python3 scripts/security_scan.py --mode owasp .
 
# 输出 JSON 格式报告
python3 scripts/security_scan.py --format json --output report.json .
 
# 只显示 high 及以上严重级别
python3 scripts/security_scan.py --severity high .

=== Security Scan Report ===
Target: /path/to/project
Modules: deps, secrets, owasp
 
[CRITICAL] AWS Access Key ID
  File: src/config.py:15
  Code: AWS_KEY = "example-aws-access-key-id"
 
[HIGH] SQL Injection (f-string)
  File: src/db.py:42
  Code: cursor.execute(f"SELECT * FROM users WHERE id={user_id}")
 
--- Summary ---
Critical: 1 | High: 1 | Medium: 0 | Low: 0
Total findings: 2

{
  "target": "/path/to/project",
  "scan_time": "2026-04-14T10:30:00",
  "findings": [
    {
      "scanner": "secrets",
      "name": "AWS Access Key ID",
      "severity": "critical",
      "file": "src/config.py",
      "line": 15,
      "snippet": "AWS_KEY = \"example-aws-access-key-id\"",
      "category": "secret-pattern"
    }
  ],
  "summary": {"critical": 1, "high": 0, "medium": 0, "low": 0, "total": 1}
}