OWASP/glue

Name: glue

Owner: OWASP

Description: Application Security Automation

Created: 2015-08-27 15:15:30.0

Updated: 2018-01-19 11:09:25.0

Pushed: 2017-11-02 12:00:53.0

Homepage:

Size: 7341

Language: Ruby

GitHub Committers

User	Most Recent Commit	# Commits

Other Committers

User	Email	Most Recent Commit	# Commits

README

Glue

Glue is a framework for running a series of tools. Generally, it is intended as a backbone for automating a security analysis pipeline of tools.

Recommended Usage

For those wishing to run Glue, we recommend using the docker image because it should have the other tools it uses available already and configured. See the documentation for more info. Glue Docker Documentation

For those interested in how to use Glue in a DevOps context, see Glue DevOps Integration Options

Installation

gem install owasp-glue

or

docker run owasp/glue

Installation for Development

clone https://github.com/owasp/glue
lue                     -- RVM will set to 2.3.1 with Gemset Glue
install bundler
le install

Running in Development

ib
in/glue -h

Extending Glue

Glue is intended to be extended through added “tasks”. To add a new tool, copy an existing task and tweak to make it work for the tool in question.

Usage

Glue <options> <target>

Options

Common options include:

or debug
or format (takes "json", "csv", "jira")

For a full list of options, use Glue --help or see the OPTIONS.md file.

Target

The target can be:

• Filesystem (which is analyzed in place)
• Git repo (which is cloned for analysis)
• Other types of images (.iso, docker, etc. are experimental)

Dependencies

• clamav
• hashdeep
• rm (*nix)
• git
• mount (*nix)
• docker

Development

To run the code, run the following from the root directory:

>ruby bin/Glue <options> target

To build a gem, just run:

gem build Glue.gemspec

Integration

Git Hooks

First, grab the hook from the code.

tation:hooks mk$ cp /area53/owasp/Glue/hooks/pre-commit .

Then make it executable.

tation:hooks mk$ chmod +x pre-commit

Make sure the shell you are committing in can see docker.

tation:hooks mk$ eval "$(docker-machine env default)"

Now go test and make a change and commit a file. The result should be that Glue runs against your code and will not allow commits unless the results are clean. (Which is not necessarily a reasonable expectation)

Configuration files

For advanced usage scenarios, you can save your configuration and use it at runtime.

Authors

Matt Konda Alex Lock Rafa Perez

License

Apache 2: http://www.apache.org/licenses/LICENSE-2.0