maxvaer / gitanalyzer

A template based SAST scanner for Git repositories.

gitAnalyzer

A template based scanner for GitHub repositories.

Features

• The number of repositories gitAnalyzer scans at the same time, can be set.
• Execute regular expression, console command, Bash or Python scripts.
• A crawler to fetch URLs and metadata of all public repositories.
• A Web-UI to monitor the current scan.

Installation

gitAnalyzer requires Go for installation.
Run the following command to install the tool:

git clone https://github.com/maxvaer/gitAnalyzer.git && cd gitAnalyzer && go mod tidy && go build

Usage & Templates

Take a look at the corresponding wiki pages:

• Usage
• Template

Metadata Database

The included crawler was used to fetch the metadata of 1.000.000+ repositories.
To get a dump of this dataset, take a look at this repository: GitHub-Metadata
This dataset can be used, to query a list of URLs of repositories,
which can be scanned using gitAnalyzer.

---

gitAnalyzer is distributed under MIT License.