m-paf

M-PAF

Malicious-PAckageFinder (m-paf), The CLI tool for discovering malicious and risky packages using SBOM files.

Demo

https://github.com/user-attachments/assets/06f35a2c-3e93-4950-b0eb-f95624f5f307

Installation

Github Hosted Method

• Install latest release using below command

  go install -v github.com/dmdhrumilmistry/m-paf@latest
  

• Install main/dev branch

  go install -v github.com/dmdhrumilmistry/m-paf@main # install main branch
  go install -v github.com/dmdhrumilmistry/m-paf@dev  # install dev branch
  

Clone Method

• Clone repository

  git clone https://github.com/dmdhrumilmistry/m-paf
  

• Run Go install command

  go install ./...
  

Using M-PAF

• Print Help

  m-paf -h
  

• Basic Usage

  m-paf -f sbom.jsom
  

Open In Google Cloud Shell

• Temporary Session

  

• Perisitent Session

  

Have any Ideas 💡 or issue

Create an issue OR fork the repo, update script and create a Pull Request

Contributing

Refer CONTRIBUTIONS.md for contributing to the project.

LICENSE

Tool is distributed under MIT License. Refer License for more information.