32 lines
1.5 KiB
Markdown
32 lines
1.5 KiB
Markdown
# PHPGuard 1.2 — Phase 3
|
|
|
|
Native macOS SwiftUI PHP inventory and CVE research tool.
|
|
|
|
## Included
|
|
- Phase 2 SSH inventory, APT update listing, Docker PHP inventory, JSON reports.
|
|
- Phase 3 **CVE research** screen using the public NVD 2.0 API, with published dates, descriptions, and CVSS metadata.
|
|
- NVD records are keyword-search **candidates only**, NOT confirmed vulnerabilities on your servers.
|
|
- No Ubuntu package revision/backport matching is performed; no server is marked secure.
|
|
- `Scripts/build.sh` for unsigned local Debug builds and optional launch.
|
|
- `Scripts/release.sh` for Release build, Developer ID signing, DMG, notarization and stapling.
|
|
|
|
## Build
|
|
```bash
|
|
./Scripts/build.sh
|
|
LAUNCH_AFTER_BUILD=0 CONFIGURATION=Release ./Scripts/build.sh
|
|
```
|
|
|
|
## Release
|
|
Configure a notarytool keychain profile on your Mac, then run:
|
|
```bash
|
|
NOTARY_PROFILE=your-profile ./Scripts/release.sh
|
|
```
|
|
The script auto-detects a Developer ID Application identity, or use `SIGNING_IDENTITY`.
|
|
Release artifacts go to `dist/`. No automatic upload or publication.
|
|
|
|
## Security
|
|
SSH requires existing known_hosts entries and key-based authentication. Scans are read-only. NVD results are for research, not a substitute for vendor-specific package advisories.
|
|
|
|
## Known limitations
|
|
Not built/tested with Xcode in this environment. CVE discovery is broad keyword search and may include unrelated products or omit relevant vulnerabilities. NVD may rate-limit requests. Automatic backport assessment is a future phase.
|