How wormless-framework/wormless-api works
Wormless API is a Spring backend for malware and vulnerability analysis, threat intelligence, and SOC workflows. Its principal flow accepts an uploaded file, validates and persists file/job records, sends the file to an external sandbox, stores the raw result, and exposes job status/results. The tree also shows distinct dependency scanning, threat indicators, vulnerability management, detection/blocking policy, remediation, reporting, CI/CD pipeline, and user capabilities. Detailed wiring is shown only where sampled source supports it; other feature branches are represented without speculative call edges.
Main entry points: SandboxService.java Analysis orchestration · SandboxController.java Sandbox endpoints · ArquivoService.java File validation · ArquivoRepository.java File repository
Components 25
File Analysis
- Sandbox endpoints
src/main/java/com/wormless/controller/SandboxController.java - Analysis orchestration
src/main/java/com/wormless/services/SandboxService.java - File validation
src/main/java/com/wormless/services/ArquivoService.java - File repository
src/main/java/com/wormless/repository/ArquivoRepository.java - Job lifecycle
src/main/java/com/wormless/services/AnaliseJobService.java - Job repository
src/main/java/com/wormless/repository/AnaliseJobRepository.java - Sandbox client
src/main/java/com/wormless/integrations/sandbox/SandboxCliente.java - Dependency scanning
src/main/java/com/wormless/services/DependenciaScanService.java - Dependency endpoints
src/main/java/com/wormless/controller/DependenciaScanController.java - Dependency repository
src/main/java/com/wormless/repository/DependenciaScanRepository.java
Threat Intelligence
- Threat management
src/main/java/com/wormless/services/AmeacaService.java - Threat indicators
src/main/java/com/wormless/services/IndicadorAmeacaService.java - Vulnerability management
src/main/java/com/wormless/services/VulnerabilidadeService.java - Threat reporting
src/main/java/com/wormless/services/RelatorioAmeacaService.java
SOC Operations
- Detection rules
src/main/java/com/wormless/services/RegraDeteccaoService.java - Block policies
src/main/java/com/wormless/services/PoliticaBloqueioService.java - False positives
src/main/java/com/wormless/services/FalsoPositivoService.java - Remediation
src/main/java/com/wormless/services/RemediacaoService.java - CI/CD pipelines
src/main/java/com/wormless/services/PipelineCICDService.java - Pipeline repository
src/main/java/com/wormless/repository/PipelineCICDRepository.java
API and Persistence
- Web users
src/main/java/com/wormless/services/UsuarioWebService.java - MySQL
- API error mapping
src/main/java/com/wormless/exception/GlobalExceptionHandler.java
Other components
- API client
- Sandbox service
Connections 15
- API client → Sandbox endpoints: uploads file
- Sandbox endpoints → Analysis orchestration: starts analysis
- Analysis orchestration → File validation: saves file
- Analysis orchestration → Job lifecycle: creates and updates job
- Analysis orchestration → Sandbox client: submits file
- Sandbox client → Sandbox service: requests analysis
- File validation → File repository: reads and writes
- Job lifecycle → Job repository: reads and writes
- Dependency endpoints → Dependency scanning: invokes
- Dependency scanning → Dependency repository: reads and writes
- CI/CD pipelines → Pipeline repository: reads and writes
- File repository → MySQL: persists records
- Job repository → MySQL: persists records
- Dependency repository → MySQL: persists records
- Pipeline repository → MySQL: persists records