A static security analysis tool for PHP and Laravel applications with recursive taint analysis capabilities. Features: - Comprehensive vulnerability detection (XSS, SQL Injection, Command Injection, Path Traversal, CSRF, Authentication issues) - Recursive taint analysis across function calls - Blade template analysis with context-aware XSS detection - Smart escape detection and escape bypass detection - Syntax highlighting in terminal output - Multi-language support (Japanese/English) - Docker support for easy deployment - Multiple output formats (text, JSON, HTML, SARIF, Markdown) - CI/CD integration ready (GitHub Actions, GitLab CI) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
56 lines
582 B
Plaintext
56 lines
582 B
Plaintext
# Dependencies
|
|
/vendor/
|
|
composer.phar
|
|
|
|
# Claude Code
|
|
.claude/
|
|
|
|
# IDE
|
|
.idea/
|
|
.vscode/
|
|
*.swp
|
|
*.swo
|
|
*~
|
|
|
|
# OS
|
|
.DS_Store
|
|
Thumbs.db
|
|
|
|
# Test projects (cloned for testing)
|
|
/test-projects/
|
|
/test-samples/
|
|
|
|
# Reports and outputs
|
|
*.log
|
|
/reports/
|
|
report.json
|
|
report.html
|
|
report.md
|
|
report.sarif
|
|
|
|
# Docker
|
|
.docker/
|
|
|
|
# PHPUnit / Testing
|
|
.phpunit.result.cache
|
|
.phpunit.cache/
|
|
/coverage/
|
|
.coverage
|
|
|
|
# Temporary files
|
|
*.tmp
|
|
*.temp
|
|
*.cache
|
|
|
|
# Environment
|
|
.env
|
|
.env.local
|
|
.env.*.local
|
|
|
|
# Project config (use .security-lint.json.example as template)
|
|
.security-lint.json
|
|
|
|
# Build artifacts
|
|
/build/
|
|
/dist/
|