A static security analysis tool for PHP and Laravel applications with recursive taint analysis capabilities. Features: - Comprehensive vulnerability detection (XSS, SQL Injection, Command Injection, Path Traversal, CSRF, Authentication issues) - Recursive taint analysis across function calls - Blade template analysis with context-aware XSS detection - Smart escape detection and escape bypass detection - Syntax highlighting in terminal output - Multi-language support (Japanese/English) - Docker support for easy deployment - Multiple output formats (text, JSON, HTML, SARIF, Markdown) - CI/CD integration ready (GitHub Actions, GitLab CI) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
14 lines
349 B
YAML
14 lines
349 B
YAML
version: '3.8'
|
|
|
|
services:
|
|
security-lint:
|
|
build:
|
|
context: .
|
|
dockerfile: Dockerfile
|
|
image: php-security-linter:latest
|
|
volumes:
|
|
# Mount the target directory as read-only
|
|
- ${TARGET_PATH:-.}:/target:ro
|
|
# Default command can be overridden
|
|
# Example: docker-compose run --rm security-lint /target/app -s high
|