v1.0.X-integration

Author: xfhg

.github/workflows/intercept.yml

@@ -26,13 +26,11 @@ jobs:
 
     - name: compile intercept
       run: |
-        make build && cp release/intercept playground/intercept
+        make build && cp release/intercept .
 
-    - name: Run your analysis tool
+    - name: Run intercept tool
       run: |
-        cd playground/
-        ./intercept audit --policy policies/nginx_insecure.yaml --target targets/ -vvvv 
-        
+        ./intercept audit --policy playground/policies/nginx_insecure.yaml --target playground/targets/ -vvvv 
 
     - name: Find SARIF file
       id: find-sarif

playground/policies/nginx_insecure.yaml

@@ -1,5 +1,5 @@
 Policies:
-  - id: "SCAN-001 Server Tokens"
+  - id: "I SCAN-001 Server Tokens"
     type: "scan"
     filepattern: "nginx.conf"
     enforcement:
@@ -19,7 +19,7 @@ Policies:
     _regex:
       - "server_tokens\\s+on;"
 
-  - id: "SCAN-002 SSL Protocols"
+  - id: "I SCAN-002 SSL Protocols"
     type: "scan"
     filepattern: "nginx.conf"
     enforcement:
@@ -85,7 +85,7 @@ Policies:
   #   _regex:
   #     - "^(?!.*ssl_certificate|ssl_certificate_key)"
 
-  - id: "SCAN-005 Weak SSL Ciphers"
+  - id: "I SCAN-005 Weak SSL Ciphers"
     type: "scan"
     filepattern: "nginx.conf"
     enforcement:
@@ -127,7 +127,7 @@ Policies:
   #     - "listen\\s+80;"
   #     - "server\\s*\\{[^\\{]*listen\\s+80[^\\{]*[^#]\\breturn\\s+301\\b.*https;"
 
-  - id: "SCAN-007 Access Logs Disabled"
+  - id: "I SCAN-007 Access Logs Disabled"
     type: "scan"
     filepattern: "nginx.conf"
     enforcement:
@@ -167,7 +167,7 @@ Policies:
     _regex:
       - "autoindex\\s+on;"
 
-  - id: "SCAN-009 Large Buffer Size"
+  - id: "I SCAN-009 Large Buffer Size"
     type: "scan"
     filepattern: "nginx.conf"
     enforcement: