How to run Horusec in multiple directories?

Workdir

WorkDir is a representation to run several projects inside a directory, and you can configure it through a horusec-config.json file.

For example, if your project is a C# app that uses Netcore 3.1 and Angular, and has this structure:

|- NetCoreProject/
|--- horusec-config.json
|--- controllers/
|--- NetCoreProject.csproj
|--- views/
|------ pages/
|------ package.json
|------ package-lock.json

Your initial .csproj is inside of /NetCoreProject and your package-lock.json is inside of /NetCoreProject/views. Then, you have to configure your working directory. For this example, see the configuration below:

{
    "horusecCliWorkDir": {
        "csharp": [
            "NetCoreProject"
        ],
        "javaScript": [
            "NetCoreProject/views"
        ]
    }
}

The project’s structure is divided by languages and can support many on each one. But in mostly cases it is not necessary to make this configuration, because Horusec can identify which languages and where are they in the main files. However, in some cases the functionality is used to force the tool to realize it above specific directories.

See below the accepted languages interface:

type WorkDir struct {
	Go         []string `json:"go"`
	NetCore    []string `json:"netCore"`
	CSharp     []string `json:"csharp"`
	Ruby       []string `json:"ruby"`
	Python     []string `json:"python"`
	Java       []string `json:"java"`
	Kotlin     []string `json:"kotlin"`
	JavaScript []string `json:"javaScript"`
	Leaks      []string `json:"leaks"`
	HCL        []string `json:"hcl"`
	PHP        []string `json:"php"`
	C          []string `json:"c"`
	Yaml       []string `json:"yaml"`
	Generic    []string `json:"generic"`
}

Feedback

Was this page helpful?

Glad to hear it! Please tell us how we can improve.

Sorry to hear that. Please tell us how we can improve.