How aniiyer-host/secureci works
SecureCI’s main workflow takes a source build through security scanning, report normalization, and PostgreSQL import, then serves persisted evidence through a REST API to a dashboard. The graph also preserves the documented scanner types and SBOM capability. Pipeline stages and dashboard behavior are documented in the README; source excerpts verify the parsers, importer, database pool, and API queries. The dashboard’s client-side implementation and Jenkinsfile were not sampled, so those links rely on README statements.
Main entry points: Jenkinsfile Jenkins Pipeline · semgrep_parser.py Semgrep Parser · npm_audit_parser.py npm audit Parser · zap_parser.py ZAP Parser
Components 14
Build and Scanning
- Jenkins Pipeline
Jenkinsfile - Test Application
target-app/server.js - Security Scanners
Report Normalization
- Semgrep Parser
scripts/semgrep_parser.py - npm audit Parser
scripts/npm_audit_parser.py - ZAP Parser
scripts/zap_parser.py - Syft Parser
scripts/syft_parser.py - Fingerprinting
scripts/fingerprint.py
Evidence Storage
- Report Importer
server/importer.js - PostgreSQL Pool
server/db.js - Evidence Database
database/schema.sql
Dashboard and API
- REST API
app.js - Security Dashboard
public/index.html
Other components
- GitHub
Connections 19
- GitHub → Jenkins Pipeline: provides source
README.md - Jenkins Pipeline → Security Scanners: runs scans
README.md - Jenkins Pipeline → Test Application: builds and starts
README.md - Security Scanners → Semgrep Parser: Semgrep output
README.md - Security Scanners → npm audit Parser: npm audit output
README.md - Security Scanners → ZAP Parser: ZAP output
README.md - Security Scanners → Syft Parser: Syft output
README.md - Jenkins Pipeline → Semgrep Parser: runs parser
README.md - Jenkins Pipeline → npm audit Parser: runs parser
README.md - Jenkins Pipeline → ZAP Parser: runs parser
README.md - Jenkins Pipeline → Syft Parser: runs parser
README.md - Semgrep Parser → Fingerprinting: generates IDs
scripts/semgrep_parser.py - npm audit Parser → Fingerprinting: generates IDs
scripts/npm_audit_parser.py - ZAP Parser → Fingerprinting: generates IDs
scripts/zap_parser.py - Jenkins Pipeline → Report Importer: imports reports
README.md - Report Importer → PostgreSQL Pool: queries through
server/importer.js - PostgreSQL Pool → Evidence Database: connects to
server/db.js - REST API → PostgreSQL Pool: queries
app.js - Security Dashboard → REST API: loads dashboard data
README.md