Malware Analysis

vet scan -D /path/to/code --malware-query

# npm projects
vet scan -M package-lock.json --malware-query

# Python projects
vet scan -M requirements.txt --malware-query

# Go projects
vet scan -M go.mod --malware-query

# Ruby projects
vet scan -M Gemfile.lock --malware-query

vet scan --purl pkg:npm/[email protected] --malware-query

vet scan --vsx --malware-query

name: Malware Protection
on:
  pull_request:
    branches: [ main ]

jobs:
  malware-scan:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Run malware analysis
        uses: safedep/vet-action@v1
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

stages:
  - security

malware-scan:
  stage: security
  image: ghcr.io/safedep/vet:latest
  script:
    - vet scan -D . --malware-query --report-json malware-report.json
  artifacts:
    reports:
      security: malware-report.json

pipeline {
    agent any

    stages {
        stage('Malware Scan') {
            steps {
                sh 'vet scan -D . --malware-query --report-json malware-results.json'
                archiveArtifacts artifacts: 'malware-results.json'
            }
        }
    }
}