- Introduced core files including Dockerfile, action.yml, and entry point script (bin/polinrider.js) for the PolinRider malware scanner. - Created configuration files: .env.example, .gitignore, and .npmrc for environment setup and dependency management. - Added CI workflows for testing, building, and releasing the action, along with examples for usage in GitHub Actions. - Implemented a README.md to provide documentation on usage, features, and setup instructions. - Included necessary scripts for building the action and handling security measures during execution. - Established a structured directory for reports and workspace management within Docker. - Ensured all files are set up for a secure and efficient scanning process of GitHub repositories for PolinRider malware.
31 lines
806 B
JSON
31 lines
806 B
JSON
{
|
|
"name": "polinrider-remover",
|
|
"version": "2.0.0",
|
|
"description": "Hardened CLI that scans a GitHub org for PolinRider malware and opens surgical cleanup PRs. Reads target files as inert text only — never executes them.",
|
|
"type": "module",
|
|
"bin": {
|
|
"polinrider": "bin/polinrider.js"
|
|
},
|
|
"main": "src/index.js",
|
|
"engines": {
|
|
"node": ">=20"
|
|
},
|
|
"scripts": {
|
|
"start": "node bin/polinrider.js",
|
|
"scan": "node bin/polinrider.js",
|
|
"test": "node --test",
|
|
"test:hardened": "node --disallow-code-generation-from-strings --test",
|
|
"build:action": "node scripts/build-action.mjs"
|
|
},
|
|
"dependencies": {
|
|
"chalk": "^5.3.0",
|
|
"execa": "^9.5.2",
|
|
"ora": "^8.1.1"
|
|
},
|
|
"devDependencies": {
|
|
"esbuild": "^0.25.0"
|
|
},
|
|
"license": "MIT",
|
|
"private": true
|
|
}
|