Tags: michelin/ChopChop
Tags
We added a new attribute `uris` which allows a list of URI. (#49) `uri` and `uris` can't be specified at the same time. One example configuration file is as follow: ```yaml - uris: ["/db.sql", "/db.sql.gz", "/db.sqlite", "/db.sqlite.gz", "/db.sqlite3", "/db.sqlite3.gz", "/data.sql", "/data.sql.gz", "/users.sql", "/users.sql.gz", "/dump.sql", "/dump.sql.gz", "/mysqldump.sql", "/mysqldump.sql.gz", "/backup.sql", "/backup.sql.gz", "/db.backup", "/db.backup.gz", "/database.sql", "/database.sql.gz", "/db-data.sql", "/db-data.sql.gz", "/db_test.sql", "/db_test.sql.gz", "/db-test.sql", "/db-test.sql.gz"] checks: - name: Database file status_code: 200 remediation: Delete this file description: Verifies a database dump is accessible. severity: "High" ``` And we tried it using: ```bash ./gochopchop scan -u http://127.0.0.1:3000 --timeout 1 --csv --csv-file boo.csv -c policy.yml ``` Closes #2