SAST Scanning

Integrated Tools

Quick Start

# Install CLI
pip install codephreak-security-auditor

# Scan current directory
codephreak scan

# Scan specific path
codephreak scan --target ./src

# Quick scan (faster, fewer tools)
codephreak scan --workflow quick-check

# Full audit (comprehensive)
codephreak scan --workflow full-audit

Output Formats

Generate reports in multiple formats for different use cases:

# JSON output (default)
codephreak scan --format json --output results.json

# SARIF format (GitHub Code Scanning compatible)
codephreak scan --format sarif --output results.sarif

# Multiple formats
codephreak scan --format json --format sarif --format html

Sample Output

$ codephreak scan --target ./myapp

🔍 CodePhreak Security Auditor v1.0.0
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

Running security scan on: ./myapp
Workflow: full-audit

[1/6] Running Semgrep...         ✓ 12 findings
[2/6] Running Bandit...          ✓ 3 findings
[3/6] Running Trivy...           ✓ 8 findings
[4/6] Running Gitleaks...        ✓ 2 findings
[5/6] Running Checkov...         ✓ 5 findings
[6/6] Running Hadolint...        ✓ 1 finding

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
   SCAN SUMMARY
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
┃ Severity   ┃ Count ┃
┡━━━━━━━━━━━━╇━━━━━━━┩
│ Critical   │   2   │
│ High       │   8   │
│ Medium     │  15   │
│ Low        │   6   │
└────────────┴───────┘

📄 Report saved: ./codephreak_report.json

CI/CD Integration

Integrate into your CI/CD pipeline with exit codes and thresholds:

# GitHub Actions
- name: Security Scan
  run: |
    pip install codephreak-security-auditor
    codephreak scan --fail-on critical high

# GitLab CI
security_scan:
  script:
    - pip install codephreak-security-auditor
    - codephreak scan --format sarif --output gl-sast-report.sarif
  artifacts:
    reports:
      sast: gl-sast-report.sarif

Fail Thresholds

# Fail on critical only
codephreak scan --fail-on critical

# Fail on critical or high
codephreak scan --fail-on critical --fail-on high

# Fail on any finding
codephreak scan --fail-on critical --fail-on high --fail-on medium --fail-on low

Free Tier Includes