vPiper

🛡️ vPiper is a CLI-based security scanner for CI/CD pipelines such as GitHub Actions, Jenkinsfiles, Azure Pipelines, and more.

🚀 Features

• Detects hardcoded secrets, token leaks, use of 'latest' tags
• Warns about insecure curl downloads
• Supports YAML and Jenkins pipelines
• Outputs HTML report with categorized severity

🛠️ Installation

git clone https://github.com/yourrepo/super-piper
cd super-piper
npm install

🧪 Usage

node cli/index.js examples/github-action-vuln.yml

📦 Output

Generates a report.html file in the root folder.

🔌 CI/CD Integration (GitHub Actions)

Add this to your workflow:

- name: Scan with vPiper
  run: |
    git clone https://github.com/yourrepo/vPiper
    cd vPiper
    npm install
    node cli/index.js ../.github/workflows/main.yml