AlvaWymer / murphysec

An open source tool focused on software supply chain security. 墨菲安全专注于软件供应链安全，具备专业的软件成分分析（SCA）、漏洞检测、专业漏洞库。

README.md

murphysec

一款专注于软件供应链安全的开源工具，包含开源组件依赖分析、漏洞检测及漏洞修复等功能。

安装

macOS

wget https://github.com/murphysec/murphysec/releases/latest/download/murphysec-darwin-amd64
chmod 0755 murphysec-darwin-amd64 && mv murphysec-darwin-amd64 /usr/bin/murphysec

Windows

使用scoop安装

scoop bucket add murphysec https://github.com/murphysec/scoop-bucket
scoop update
scoop install murphysec

Linux

wget https://github.com/murphysec/murphysec/releases/latest/download/murphysec-linux-amd64
chmod 0755 murphysec-linux-amd64 && mv murphysec-linux-amd64 /usr/bin/murphysec

配置

执行murphysec auth login完成身份验证

小范围公测中，点此申请访问令牌

用法

murphysec: A software supply chain security inspection tool.

Usage:
  murphysec [flags]
  murphysec [command]

Available Commands:
  auth        manage the API token
  completion  generate the autocompletion script for the specified shell
  help        Help about any command
  scan        Scan open source vulnerabilities in project

Flags:
      --color          colorize the output (default true)
  -h, --help           help for murphysec
      --token string   specify the API token
  -v, --verbose        show verbose log
      --version        output version information and exit

Use "murphysec [command] --help" for more information about a command.

开源协议

Apache 2.0