Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/GSA/site-scanning-engine
The repository for the rearchitected site-scanning project, specifically the scanning engine itself.
https://github.com/GSA/site-scanning-engine
Last synced: about 2 months ago
JSON representation
The repository for the rearchitected site-scanning project, specifically the scanning engine itself.
- Host: GitHub
- URL: https://github.com/GSA/site-scanning-engine
- Owner: GSA
- Created: 2020-10-03T00:02:51.000Z (almost 4 years ago)
- Default Branch: main
- Last Pushed: 2024-05-16T14:26:59.000Z (4 months ago)
- Last Synced: 2024-05-16T15:43:07.260Z (4 months ago)
- Language: TypeScript
- Homepage: https://github.com/GSA/site-scanning/issues
- Size: 9.61 MB
- Stars: 16
- Watchers: 6
- Forks: 7
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Contributing: docs/CONTRIBUTING.md
- Code of conduct: docs/CODE_OF_CONDUCT.md
- Security: docs/SECURITY.md
Awesome Lists containing this project
README
# Site Scanning Engine
[](https://github.com/GSA/site-scanning-engine/actions/workflows/codeql.yml)
[](https://github.com/GSA/site-scanning-engine/actions/workflows/semgrep.yml)
[](https://github.com/GSA/site-scanning-engine/actions/workflows/snyk.yml)
[](https://github.com/GSA/site-scanning-engine/actions/workflows/megalinter.yml)
[](https://github.com/GSA/site-scanning-engine/actions/workflows/woke.yml)
## Description
This repository is for the Site Scanning engine itself, the codebase that actually runs the scans and generates data. This is the new base scanner repository which uses Headless Chrome, powered by Puppeteer for scanning.
For more detailed documentation about the Site Scanning program, including **who it's for**, **what it does**, **long-term goals**, etc. please visit the
[Site Scanning program website](https://digital.gov/site-scanning), especially the [Technical Details page](https://digital.gov/guides/site-scanning/technical-details/).
The project's issue tracker and other relevant repositories and links [can be found here](https://github.com/GSA/site-scanning?tab=readme-ov-file#site-scanning).
## Table of Contents
- [Site Scanning Engine](#site-scanning-engine)
- [Description](#description)
- [Table of Contents](#table-of-contents)
- [Quickstart](#quickstart)
- [Installation](#installation)
- [Dotenv](#dotenv)
- [Docker](#docker)
- [Build and Start all apps](#build-and-start-all-apps)
- [Ingest Website List](#ingest-website-list)
- [Enqueue scans](#enqueue-scans)
- [Run individual Scans](#run-individual-scans)
- [Test](#test)
- [Deploy](#deploy)
- [Development Documentation](./docs)
- [Project Layout](./docs/layout.md)
- [Detailed Development](./docs/development.md)
- [Architecture](./docs/architecture/README.md)
## Quickstart
Development Requirements:
- `git`
- `nodejs`
- `nvm` (see [.nvmrc](./.nvmrc) for current `node` version.
- `docker`
- `docker-compose`
- Cloud Foundry CLI (aka `cf`)
- `redis-cli` (optional)
### Installation
First clone the repository:
```bash
git clone https://github.com/GSA/site-scanning-engine/
```
From the project root run:
```bash
nvm use
```
This will install the correct Node version for the project.
```bash
npm i
```
This will install all production and development Node dependencies.
### Dotenv
The project uses a dotenv (`.env`) file for local development credentials.
Note that this file is not version-controlled and should only be used for
local development.
Before starting Docker, create a `.env` file in the project root and add
the following values replacing `` with a local passwords
that are at least 8 characters long.
**Note: this is only for local development and has no impact on the Cloud.gov configuration**
```env
# postgres configuration
DATABASE_HOST=localhost
DATABASE_PORT=5432
POSTGRES_USER=postgres
POSTGRES_PASSWORD=
# redis configuration
QUEUE_HOST=localhost
QUEUE_PORT=6379
# Minio Config -- Minio is an S3 api compliant storage
MINIO_ACCESS_KEY=
MINIO_SECRET_KEY=
AWS_ACCESS_KEY_ID=
AWS_SECRET_ACCESS_KEY=
S3_HOSTNAME=localhost
S3_PORT=9000
S3_BUCKET_NAME=site-scanning-snapshot
# Sets the development environment name to dev
NODE_ENV=dev
```
### Docker
From the project root run:
```bash
docker-compose up --build -d
```
This will build `(--build)` all of the Docker containers and
network interfaces listed in the
[docker-compose.yml](docker-compose.yml) file and start them
running in the background `(-d)`.
`docker-compose down` will stop and remove all containers
and network interfaces.
Running `docker-compose up --build -d` will rebuild all of
the containers. This is useful if you need to wipe data from
the database, for instance.
If you encounter any issues starting the containers with
`docker-compose`, specifically related to OOM errors
(or Exit 137) try upping the resources in your Docker
preferences.
#### Building application images
To build the application image, go to the project root
and run:
```bash
docker build -f apps/scan-engine/Dockerfile .
```
### Build and Start all apps
`cd` to the project root and run:
```bash
npm run build:all
```
This command will build the apps, which compiles from Typescript
to Javascript, doing any minification and optimization in the
process. All of the app artifacts end up in the `/dist` directory.
This is ultimately what gets pushed to Cloud Foundry.
Note that you can also build apps seperately:
```bash
npm run build:api
npm run build:scan-engine
npm run build:cli
```
Next, you can start the apps with following command:
```bash
npm run start:all
```
The apps are started as follows: first the API starts and then
the Site Scanning worker follows. This is designed so that the
API app runs any shared configuration against the database first.
Note, that you can start the apps individually as follows:
```bash
npm run start:api
npm run start:scan-engine
```
### Ingest Website List
The Site Scanning engine relies on a list of federal domains and metadata about
those to domains to operate. This list is ingested into the system
from a public repository using a the [Ingest Service](libs/ingest).
To run the ingest service do the following:
```bash
npm run ingest -- --limit 200
```
The limit parameter is optional, but it can be useful to use a smaller
subset of the total list for local development.
### Enqueue scans
To enqueue for scan all sites in the website table:
```bash
npx nest start cli -- enqueue-scans
```
### Run individual Scans
To scan a single site, which must be in the website table, run commands like:
```bash
npx nest start cli -- scan-site --url 18f.gov
```
NOTE: This is intended for testing scan behavior, and doesn't currently
write results to the database.
## Test
From the project root run:
```bash
npm run test:unit
```
This runs all unit tests.
## Deploy
First, log in to Cloud.gov using the CLI and choose the organization and space.
Then, you can use the `cloudgov-deploy.sh` script to build and deploy the apps.
You can optionally pass a different manifest file with `cloudgov-deploy.sh manifest-dev.yml`.
## Additional Documentation
- [License](docs/LICENSE.md)
- [Contributing](docs/CONTRIBUTING.md)
- [Security](docs/SECURITY.md)
- [Code of Conduct](docs/CODE_OF_CONDUCT.md)
- [Deployment](docs/deployment.md)
- [Development](docs/development.md)
- [Environment Provisioning](docs/environment_provisioning.md)
- [Layout](docs/layout.md)
- [Architectural Diagram](docs/architecture/diagrams/images/architecture-cloud-gov.png)