Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

https://github.com/NeuraLegion/sectester-net

SecTester is a new tool that integrates our enterprise-grade scan engine directly into your unit tests.
https://github.com/NeuraLegion/sectester-net

appsec brightsec c-sharp e2e pentesting qa security test testing

Last synced: 27 days ago
JSON representation

SecTester is a new tool that integrates our enterprise-grade scan engine directly into your unit tests.

Host: GitHub
URL: https://github.com/NeuraLegion/sectester-net
Owner: NeuraLegion
License: mit
Created: 2022-11-02T22:01:20.000Z (over 1 year ago)
Default Branch: master
Last Pushed: 2023-10-04T12:34:41.000Z (8 months ago)
Last Synced: 2024-01-29T21:32:21.641Z (4 months ago)
Topics: appsec, brightsec, c-sharp, e2e, pentesting, qa, security, test, testing
Language: C#
Homepage:
Size: 589 KB
Stars: 1
Watchers: 10
Forks: 3
Open Issues: 2
Metadata Files:
- Readme: README.md
- Contributing: CONTRIBUTING.md
- License: LICENSE

Lists

awesome-dotnet - SecTester - SecTester is a new tool that integrates [Bright](https://brightsec.com/) enterprise-grade scan engine directly into your integration or e2e tests. **[Proprietary]** **[Free]** (Testing)

README

        # SecTester SDK for .NET

[![Maintainability](https://api.codeclimate.com/v1/badges/c92a6cb490b75c55133a/maintainability)](https://codeclimate.com/github/NeuraLegion/sectester-net/maintainability)

[![Test Coverage](https://api.codeclimate.com/v1/badges/c92a6cb490b75c55133a/test_coverage)](https://codeclimate.com/github/NeuraLegion/sectester-net/test_coverage)

![Build Status](https://github.com/NeuraLegion/sectester-net/actions/workflows/coverage.yml/badge.svg?branch=master&event=push)

![Nuget Downloads](https://img.shields.io/nuget/dt/SecTester.Core)

## Table of contents

- [About the SecTester SDK](#about-the-sectester-sdk)

- [About Bright & SecTester](#about-bright--sectester)

- [Usage](#usage)

  - [Installation](#installation)

  - [Getting a Bright API key](#getting-a-bright-api-key)

  - [Usage examples](#usage-examples)

- [Documentation & Help](#documentation--help)

- [Ecosystem](#ecosystem)

- [Contributing](#contributing)

- [License](#license)

## About the SecTester SDK

This SDK is designed to provide all the basic tools and functions that will allow you to easily integrate the Bright

security testing engine into your own project.

With the SDK you can:

- Work with the Bright scan engine, without leaving your IDE

- Build automations within your CI or local machine for security testing

- Create your own framework/project specific wrappers (you can see some examples in the Documentation section)

## About Bright & SecTester

Bright is a developer-first Dynamic Application Security Testing (DAST) scanner.

SecTester is a new tool that integrates our enterprise-grade scan engine directly into your unit tests.

With SecTester you can:

- Test every function and component directly

- Run security scans at the speed of unit tests

- Find vulnerabilities with no false positives, before you finalize your Pull Request

Trying out Bright’s SecTester is _**free**_ 💸, so let’s get started!

> ⚠️ **Disclaimer**

>

> The SecTester project is currently in beta as an early-access tool. We are looking for your feedback to make it the

> best possible solution for developers, aimed to be used as part of your team’s SDLC. We apologize if not everything will

> work smoothly from the start, and hope a few bugs or missing features will be no match for you!

>

> Thank you! We appreciate your help and feedback!

## Usage

### Installation

First install the module via `dotnet` or `nuget.exe` and do not forget to install the peer dependencies as well:

```bash

$ dotnet add package SecTester.Runner

```

or

```powershell

PS> NuGet\Install-Package SecTester.Runner

```

### Getting a Bright API key

1. Register for a free account at Bright’s [**signup**](https://app.neuralegion.com/signup) page

2. Optional: Skip the quickstart wizard and go directly to [**User API key creation**](https://app.neuralegion.com/profile)

3. Create a Bright API key ([**check out our doc on how to create a user key**](https://docs.brightsec.com/docs/manage-your-personal-account#manage-your-personal-api-keys-authentication-tokens))

4. Save the Bright API key

   1. We recommend using your Github repository secrets feature to store the key, accessible via the `Settings > Security > Secrets > Actions` configuration. We use the ENV variable called `BRIGHT_TOKEN` in our examples

   2. If you don’t use that option, make sure you save the key in a secure location. You will need to access it later on in the project but will not be able to view it again.

   3. More info on [**how to use ENV vars in Github actions**](https://docs.github.com/en/actions/learn-github-actions/environment-variables)

> ⚠️ Make sure your API key is saved in a location where you can retrieve it later! You will need it in these next steps!

### Usage examples

Full configuration & usage examples can be found in:

- [ASP.NET Demo](https://github.com/NeuraLegion/sectester-net-demo).

- [Nest.js Demo](https://github.com/NeuraLegion/sectester-js-demo).

- [Broken Crystals Demo](https://github.com/NeuraLegion/sectester-js-demo-broken-crystals).

## Documentation & Help

- Full documentation available at: https://docs.brightsec.com/

- A demo project can forked from: https://github.com/NeuraLegion/sectester-net-demo

- Join our [Discord channel](https://discord.gg/jy9BB7twtG) and ask anything!

## Ecosystem

- [SecTester NET SDK](https://github.com/NeuraLegion/sectester-net).

- [SecTester JS SDK](https://github.com/NeuraLegion/sectester-js).

## Contributing

Please read [contributing guidelines here](./CONTRIBUTING.md).



  



## License

Copyright © 2022 [Bright Security](https://brightsec.com/).

This project is licensed under the MIT License - see the [LICENSE file](LICENSE) for details.