https://github.com/thought-machine/dracon

Security scanning & static analysis tool
https://github.com/thought-machine/dracon

Last synced: 2 months ago
JSON representation

Security scanning & static analysis tool

• Host: GitHub
• URL: https://github.com/thought-machine/dracon
• Owner: thought-machine
• License: apache-2.0
• Created: 2019-09-24T14:03:10.000Z (over 5 years ago)
• Default Branch: master
• Last Pushed: 2023-05-25T13:38:33.000Z (over 1 year ago)
• Last Synced: 2024-08-05T17:25:15.583Z (6 months ago)
• Language: Go
• Size: 3.21 MB
• Stars: 92
• Watchers: 10
• Forks: 11
• Open Issues: 12
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-hacking-lists - thought-machine/dracon - Security scanning & static analysis tool (Go)

README

        
> [!NOTE]

> **This project is deprecated.** Users should consider migrating to [Ocurity's fork of Dracon](https://github.com/ocurity/dracon).

# Dracon

Security pipelines on Kubernetes. The purpose of this project is to provide a

scalable and flexible tool to execute arbitrary tools on arbitrary code while

processing the results in a flexible way.

![](docs/images/dracon-pipeline.png)

# Getting Started

The [Getting started in Minikube](docs/getting-started/minikube.md) tutorial

explains how to install, configure, and run Dracon.

Other tutorials are also available:

| Name                                                    | Description                                                |

| ------------------------------------------------------- | ---------------------------------------------------------- |

| [Getting started in Minikube][tut-minikube]             | Beginner guide on how to get started with Dracon           |

| [Running our demo pipeline][tut-running-demos]          | End to end demo of running an example pipeline             |

| [Example of using a public git repo][tut-public-repo]   | Example of running Dracon against a public git repository  |

| [Example of using a private git repo][tut-private-repo] | Example of running Dracon against a private git repository |

| [Creating your own pipeline][tut-own-pipeline]          | WIP: How to create your own custom dracon pipeline         |

| [Creating your own producer][tut-own-producer]          | WIP: Extending Dracon by creating your own custom producer |

| [Creating your own consumer][tut-own-consumer]          | WIP: Extending Dracon by creating your own custom consumer |

## Installing

We have compiled binaries for `dracon` in under [GitHub releases](releases/). `dracon` can quickly be installed into your home directory by executing:

```bash

bash <(curl -s https://raw.githubusercontent.com/thought-machine/dracon/master/scripts/install.sh)

```

## Announcements

Dracon was announced at OWASP Appsec Amsterdam in 2019. Check out [the slides](docs/presentations/Dracon-OWASP-Presentation-export.pdf)

from the presentation.

# Support

If you have questions, reach out to us by opening a new [issue](https://github.com/thought-machine/dracon/issues/new) on Github.

# Development & Contributing

Contributions are welcome, see the [developing](docs/contributers/DEVELOPING.md)

and [releasing](docs/contributers/RELEASES.md) guides on how to get started.

# License

Dracon is under the Apache 2.0 license. See the [LICENSE](LICENSE) file for

details.

[tut-minikube]: docs/getting-started/minikube.md

[tut-own-pipeline]: docs/getting-started/tutorials/constructing-your-own-pipeline.md

[tut-own-consumer]: docs/getting-started/tutorials/creating-your-own-consumer.md

[tut-own-producer]: docs/getting-started/tutorials/creating-your-own-producer.md

[tut-private-repo]: docs/getting-started/tutorials/running-demo-against-private-repository.md

[tut-public-repo]: docs/getting-started/tutorials/running-demo-against-public-repository.md

[tut-running-demos]: docs/getting-started/tutorials/running-demos.md