Skip to content

建议:增加CI/CD无头模式(Headless Mode) #182

@hmkklol

Description

@hmkklol

你好 @0x727

在自动化安全运营中,需要将ShuiZe集成到CI/CD流水线。建议增加纯命令行模式:

建议:增加--ci-mode参数

行为:

  • 完全不输出Excel文件
  • 禁用所有交互式提示
  • 输出纯JSON/NDJSON/SARIF到stdout
  • 退出码反映结果(0=无漏洞,1=发现漏洞)

使用示例:

# .github/workflows/shuize-recon.yml
name: Weekly Recon
on:
  schedule:
    - cron: '0 0 * * 0'
jobs:
  recon:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - run: pip install -r requirements.txt
      - run: python3 ShuiZe.py -d target.com --ci-mode --sarif > results.sarif
      - uses: github/codeql-action/upload-sarif@v2
        with:
          sarif_file: results.sarif

额外提供:

  • 官方GitHub Actions示例workflow
  • GitLab CI示例
  • Jenkins Pipeline示例

这样ShuiZe可以直接接入企业的DevSecOps流程。

[English Translation / 英文摘要]

Hi maintainers, this issue is a feature / architecture / security suggestion for 10_ShuiZe.
The Chinese text above contains the detailed proposal with technical context and implementation ideas.
In summary: we are requesting the enhancement described above and would be happy to provide PRs or further discussion in either Chinese or English.
Thank you for the excellent work on this project!

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions