Wellโฆ INSA-Check is here ๐ซ
Itโs not 100% complete yet, but itโs functional ๐.
It is an npm package that audits websites and local source code against INSAโs Secure Website Management Standard checklist.
For code scanning, it can analyze Python, JavaScript/TypeScript, PHP, Java, C#, Ruby, and Go without running or uploading your code. It then gives you automated results and flags the things that still need human review.
Thereโs still work on:
โข Broaden the automated coverage
โข finish the interactive CLI review workflow
โข Properly test the dashboard with browser acceptance tests
โข The webโs UI needs fixes
But honestly, getting it to this point feels pretty damn good. ๐
@polymathica
#insacheck
Itโs not 100% complete yet, but itโs functional ๐.
It is an npm package that audits websites and local source code against INSAโs Secure Website Management Standard checklist.
For code scanning, it can analyze Python, JavaScript/TypeScript, PHP, Java, C#, Ruby, and Go without running or uploading your code. It then gives you automated results and flags the things that still need human review.
Thereโs still work on:
โข Broaden the automated coverage
โข finish the interactive CLI review workflow
โข Properly test the dashboard with browser acceptance tests
โข The webโs UI needs fixes
But honestly, getting it to this point feels pretty damn good. ๐
@polymathica
#insacheck
๐ฅ11