Merge branch 'Tencent:main' into main

Author: bensonhome

server/projects/main/apps/scan_conf/management/commands/open_source/sqlcheck.json

@@ -4,6 +4,23 @@
       "display_name": "SQLCheck",
       "description": "Automatically identify anti-patterns in SQL queries.",
       "license": "Apache2.0",
+      "libscheme_set": [
+        {
+            "condition": null,
+            "tool_libs": [
+                {
+                    "name": "LINUX_GCC_5_4",
+                    "source": "system"
+                },
+                {
+                    "name": "LINUX_PYTHON37",
+                    "source": "system"
+                }
+            ],
+            "scheme_os": "linux",
+            "default_flag": true
+        }
+    ],
       "task_processes": [
         "analyze",
         "datahandle"

server/projects/main/apps/scan_conf/management/commands/open_source_package/enhance_safety_js.json

@@ -0,0 +1,53 @@
+[
+    {
+        "name": "【NodeJs】强化安全规则包",
+        "description": "针对Nodejs express的安全规则",
+        "revision": null,
+        "package_type": "official",
+        "languages": [
+            "js"
+        ],
+        "labels": [
+            "安全"
+        ],
+        "checkrule_set": [
+            {
+                "checktool": "tca_ql_js",
+                "checkrule": "express_codeinject",
+                "severity": "fatal",
+                "rule_params": null,
+                "state": "enabled"
+            },
+            {
+                "checktool": "tca_ql_js",
+                "checkrule": "express_pathtraversal",
+                "severity": "fatal",
+                "rule_params": null,
+                "state": "enabled"
+            },
+            {
+                "checktool": "tca_ql_js",
+                "checkrule": "express_urlrender",
+                "severity": "fatal",
+                "rule_params": null,
+                "state": "enabled"
+            },
+            {
+                "checktool": "tca_ql_js",
+                "checkrule": "express_xss",
+                "severity": "error",
+                "rule_params": null,
+                "state": "enabled"
+            },
+            {
+                "checktool": "tca_ql_js",
+                "checkrule": "express_xxe",
+                "severity": "fatal",
+                "rule_params": null,
+                "state": "enabled"
+            }
+        ],
+        "open_saas": false,
+        "envs": null
+    }
+]

server/projects/main/apps/scan_conf/management/commands/open_source_tgit_toollib/linux_gcc_5_4.json

@@ -0,0 +1,10 @@
+{
+  "name": "LINUX_GCC_5_4",
+  "scm_url": "https://git.code.tencent.com/TCA/tca-tools/linux-gcc-v5.4.0.git",
+  "scm_type": "git",
+  "envs": {
+    "LD_LIBRARY_PATH": "$ROOT_DIR/lib64;$LD_LIBRARY_PATH"
+  },
+  "lib_os": "linux",
+  "lib_type": "public"
+}

server/projects/main/apps/scan_conf/management/commands/open_source_toollib/linux_gcc_5_4.json

@@ -0,0 +1,10 @@
+{
+  "name": "LINUX_GCC_5_4",
+  "scm_url": "https://github.com/TCATools/linux-gcc-v5.4.0/releases/download/v20220906.1/gcc-v5.4.0.zip",
+  "scm_type": "link",
+  "envs": {
+    "LD_LIBRARY_PATH": "$ROOT_DIR/lib64;$LD_LIBRARY_PATH"
+  },
+  "lib_os": "linux",
+  "lib_type": "public"
+}