Initial commit: PHP/Laravel Security Linter v1.0.0
A static security analysis tool for PHP and Laravel applications with recursive taint analysis capabilities. Features: - Comprehensive vulnerability detection (XSS, SQL Injection, Command Injection, Path Traversal, CSRF, Authentication issues) - Recursive taint analysis across function calls - Blade template analysis with context-aware XSS detection - Smart escape detection and escape bypass detection - Syntax highlighting in terminal output - Multi-language support (Japanese/English) - Docker support for easy deployment - Multiple output formats (text, JSON, HTML, SARIF, Markdown) - CI/CD integration ready (GitHub Actions, GitLab CI) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
This commit is contained in:
55
.gitignore
vendored
Normal file
55
.gitignore
vendored
Normal file
@@ -0,0 +1,55 @@
|
||||
# Dependencies
|
||||
/vendor/
|
||||
composer.phar
|
||||
|
||||
# Claude Code
|
||||
.claude/
|
||||
|
||||
# IDE
|
||||
.idea/
|
||||
.vscode/
|
||||
*.swp
|
||||
*.swo
|
||||
*~
|
||||
|
||||
# OS
|
||||
.DS_Store
|
||||
Thumbs.db
|
||||
|
||||
# Test projects (cloned for testing)
|
||||
/test-projects/
|
||||
/test-samples/
|
||||
|
||||
# Reports and outputs
|
||||
*.log
|
||||
/reports/
|
||||
report.json
|
||||
report.html
|
||||
report.md
|
||||
report.sarif
|
||||
|
||||
# Docker
|
||||
.docker/
|
||||
|
||||
# PHPUnit / Testing
|
||||
.phpunit.result.cache
|
||||
.phpunit.cache/
|
||||
/coverage/
|
||||
.coverage
|
||||
|
||||
# Temporary files
|
||||
*.tmp
|
||||
*.temp
|
||||
*.cache
|
||||
|
||||
# Environment
|
||||
.env
|
||||
.env.local
|
||||
.env.*.local
|
||||
|
||||
# Project config (use .security-lint.json.example as template)
|
||||
.security-lint.json
|
||||
|
||||
# Build artifacts
|
||||
/build/
|
||||
/dist/
|
||||
Reference in New Issue
Block a user