AI Vulnerability Scanner for CI/CD

What It Does

Installation

pip install openai

Usage

python ai_vulnerability_scanner.py --path <path_to_file_or_directory> [--output <output_file_path>]

python ai_vulnerability_scanner.py --path test_file.py

python ai_vulnerability_scanner.py --path ./src --output report.json

Source Code

import os
import json
import argparse
from unittest.mock import patch, mock_open

def scan_code_with_ai(code_snippet):
    """Mock function to simulate AI vulnerability scanning."""
    return "Mocked AI analysis result."

def analyze_file(file_path):
    """Reads a file and analyzes its content for vulnerabilities."""
    if not os.path.exists(file_path):
        return {"file": file_path, "error": "File does not exist."}

    try:
        with open(file_path, 'r') as file:
            code = file.read()
            result = scan_code_with_ai(code)
            return {"file": file_path, "analysis": result}
    except Exception as e:
        return {"file": file_path, "error": str(e)}

def analyze_path(path):
    """Analyzes all files in a directory or a single file for vulnerabilities."""
    if os.path.isfile(path):
        return [analyze_file(path)]
    elif os.path.isdir(path):
        results = []
        for root, _, files in os.walk(path):
            for file in files:
                file_path = os.path.join(root, file)
                results.append(analyze_file(file_path))
        return results
    else:
        return [{"path": path, "error": "Invalid path."}]

def main():
    parser = argparse.ArgumentParser(description="AI Vulnerability Scanner for CI/CD")
    parser.add_argument('--path', required=True, help="Path to the file or directory to analyze.")
    parser.add_argument('--output', required=False, help="Path to save the vulnerability report (JSON format).")
    args = parser.parse_args()

    results = analyze_path(args.path)

    if args.output:
        try:
            with open(args.output, 'w') as output_file:
                json.dump(results, output_file, indent=4)
            print(f"Vulnerability report saved to {args.output}")
        except Exception as e:
            print(f"Error saving report: {str(e)}")
    else:
        print(json.dumps(results, indent=4))

if __name__ == "__main__":
    main()