55# Runs all audit tools in sequence:
66# 1. owasp.sh — OWASP Top 10 / ASVS checks (code-level, per-finding)
77# 2. multi_framework.sh — NIST CSF 2.0/SSDF · CIS Controls v8 · ISO 27034 · OSSTMM
8- # 3. crypto_sensor.sh — Cryptographic inventory: algorithms, libraries, PQC,
9- # FIPS coverage, deprecated primitives, CVE scan
108#
119# Usage: bash .mise/scripts/audit/audit.sh [options]
1210#
1816# Options for multi_framework.sh:
1917# --verbose Show additional grep detail
2018#
21- # Options for crypto_sensor.sh:
22- # --quick Cryptographic source scan only (skips cargo audit / TLS)
23- # --server-url <url> Live server URL for TLS scan
24- # --update-cbom Merge findings into cbom/cbom.cdx.json
25- #
2619# Exit code: 0 if all checks pass/warn; 1 if any check fails.
2720# =============================================================================
2821
@@ -38,19 +31,16 @@ RESET=$'\e[0m'
3831
3932OWASP_ARGS=()
4033MF_ARGS=()
41- SENSOR_ARGS=()
4234
4335for arg in " $@ " ; do
4436 case " $arg " in
4537 --verbose) MF_ARGS+=(" $arg " ) ;;
46- --quick | --server-url | --update-cbom) SENSOR_ARGS+=(" $arg " ) ;;
4738 * ) OWASP_ARGS+=(" $arg " ) ;;
4839 esac
4940done
5041
5142OWASP_EXIT=0
5243MF_EXIT=0
53- SENSOR_EXIT=0
5444
5545echo " ${BOLD} ════════════════════════════════════════════════════════════${RESET} "
5646echo " ${BOLD} Cosmian KMS — OWASP Security Audit${RESET} "
@@ -64,23 +54,16 @@ echo "${BOLD} (NIST CSF 2.0/SSDF · CIS Controls v8 · ISO 27034 · OSSTMM)${RE
6454echo " ${BOLD} ════════════════════════════════════════════════════════════${RESET} "
6555bash " $SCRIPT_DIR /multi_framework.sh" " ${MF_ARGS[@]} " || MF_EXIT=$?
6656
67- echo
68- echo " ${BOLD} ════════════════════════════════════════════════════════════${RESET} "
69- echo " ${BOLD} Cosmian KMS — Cryptographic Inventory Sensor${RESET} "
70- echo " ${BOLD} ════════════════════════════════════════════════════════════${RESET} "
71- bash " $SCRIPT_DIR /crypto_sensor.sh" --repo-root " $( cd " $SCRIPT_DIR /../../.." && pwd) " " ${SENSOR_ARGS[@]} " || SENSOR_EXIT=$?
72-
7357echo
7458echo " ${BOLD} ════════════════════════════════════════════════════════════${RESET} "
7559echo " ${BOLD} Unified Audit Summary${RESET} "
7660echo " ${BOLD} ════════════════════════════════════════════════════════════${RESET} "
7761
78- if [[ " $OWASP_EXIT " -eq 0 && " $MF_EXIT " -eq 0 && " $SENSOR_EXIT " -eq 0 ]]; then
62+ if [[ " $OWASP_EXIT " -eq 0 && " $MF_EXIT " -eq 0 ]]; then
7963 echo -e " ${GREEN}${BOLD} ALL CHECKS PASSED${RESET} "
8064 exit 0
8165else
8266 [[ " $OWASP_EXIT " -ne 0 ]] && echo -e " ${RED}${BOLD} OWASP audit: FAILED (exit $OWASP_EXIT )${RESET} "
8367 [[ " $MF_EXIT " -ne 0 ]] && echo -e " ${YELLOW}${BOLD} Multi-framework audit: FAILED (exit $MF_EXIT )${RESET} "
84- [[ " $SENSOR_EXIT " -ne 0 ]] && echo -e " ${RED}${BOLD} Crypto sensor: FAILED (exit $SENSOR_EXIT )${RESET} "
8568 exit 1
8669fi
0 commit comments