Download the PHP package arjunanda/php-vaultwatch without Composer
On this page you can find all versions of the php package arjunanda/php-vaultwatch. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download arjunanda/php-vaultwatch
More information about arjunanda/php-vaultwatch
Files in arjunanda/php-vaultwatch
Package php-vaultwatch
Short Description Multi-agent security scanner for PHP. Detects secrets, misconfigurations, and vulnerabilities.
License MIT
Informations about the package php-vaultwatch
VaultWatch - PHP Security Scanner
VaultWatch is a comprehensive security scanner for PHP applications, powered by a Go core engine. It detects secrets, misconfigurations, and security vulnerabilities in your codebase to prevent accidental leaks and security issues.
📑 Table of Contents
- Features
- Installation
- Usage
- Standalone CLI
- Laravel Integration
- Security Agents
- Secrets Agent
- Config Agent
- Exposure Agent
- Hygiene Agent
- Deps Agent
- Logic Agent
- Output Format
- Building from Source
- Advanced Usage
- Custom Rules
- CI/CD Integration
- Configuration
- Ignoring Files
- Excluding Paths
- Contributing
- License
- Links
- Support This Project
- Credits
🚀 Features
- Multi-Agent Architecture: 6 specialized security agents for comprehensive analysis
- Secrets: API keys, tokens, credentials detection
- Config: Security misconfigurations
- Exposure: Exposed endpoints and attack surface
- Hygiene: Repository hygiene and sensitive files
- Deps: Dependency security analysis
- Logic: Business logic security smells
- High Performance: Powered by Go with parallel scanning and worker pools
- Smart Detection: Uses Regex, Keywords, and Shannon Entropy to reduce false positives
- Embedded Rules: Rules are embedded in binary - no external files needed
- Laravel Ready: Native integration with Artisan commands and Facades
- CI/CD Friendly: Returns exit code 1 if issues found, supports JSON output
- Secure: Runs locally, no data leaves your server
- Cross-Platform: Supports Linux, macOS, and Windows (amd64/arm64)
📦 Installation
🛠️ Usage
Standalone (CLI)
💎 Laravel Integration
This package includes a Service Provider that is automatically discovered by Laravel.
Run via Artisan:
Available Options:
Use in Code (Facade):
🔍 Security Agents
Secrets Agent
Detects hardcoded credentials and API keys:
- AWS Access Keys & Secret Keys
- Google API Keys
- GitHub Personal Access Tokens
- Stripe Keys
- Slack Tokens
- Private Keys (RSA, DSA, EC)
- Database Connection Strings
- And 20+ more patterns
Config Agent
Finds security misconfigurations:
- Debug mode enabled
- SSL verification disabled
- Permissive CORS configuration
- Default/weak credentials
- Admin panels exposed
Exposure Agent
Identifies exposed endpoints:
- Public API endpoints without auth
- Unvalidated file uploads
- Debug endpoints
- Unprotected admin routes
Hygiene Agent
Detects repository hygiene issues:
- .git directory in deployment
- Backup files (.bak, .old)
- Database dumps
- Private key files
- Editor swap files
Deps Agent
Analyzes dependency security:
- Wildcard version constraints
- Unpinned dependencies
- Dev dependencies in production
- Risky module replacements
Logic Agent
Finds business logic security smells:
- SQL injection risks
- Command execution
- Code evaluation (eval)
- Path traversal patterns
- Weak random number generation
- Hardcoded authorization
📊 Output Format
🏗️ Building from Source
If you want to build the Go binary yourself:
This will generate vaultwatch-agent binaries for all platforms in bin/:
vaultwatch-agent-linux-amd64vaultwatch-agent-linux-arm64vaultwatch-agent-darwin-amd64vaultwatch-agent-darwin-arm64vaultwatch-agent-windows-amd64.exe
🔧 Advanced Usage
Custom Rules
While rules are embedded by default, you can use custom rules:
CI/CD Integration
GitHub Actions:
GitLab CI:
📝 Configuration
Ignoring Files
Create a .vaultignore file in your project root:
Excluding Paths
🤝 Contributing
Contributions are welcome! Please feel free to submit a Pull Request.
📄 License
MIT License - see LICENSE file for details.
🔗 Links
� Support This Project
If you find VaultWatch useful, consider supporting its development:
�🙏 Credits
Built with ❤️ using:
- Go for high-performance scanning
- PHP for easy integration
- Laravel for seamless framework support
All versions of php-vaultwatch with dependencies
illuminate/support Version ^8.0|^9.0|^10.0|^11.0|^12.0
illuminate/console Version ^8.0|^9.0|^10.0|^11.0|^12.0