Metadata-Version: 2.1
Name: chainjacking
Version: 1.1.2
Summary: A tool to scan your direct GitHub dependencies for Go and find ones susceptible to ChainJacking attack
Home-page: https://github.com/checkmarx/chainjacking
Author: Checkmarx
Author-email: lior.kaplan@checkmarx.com
License: Apache v2
Keywords: chainjacking,supply chain,go,checkmarx
Platform: UNKNOWN
Requires-Python: >=3.6
Description-Content-Type: text/markdown
License-File: LICENSE.txt

# ChainJacking
Find which of your go lang direct GitHub dependencies is susceptible to ChainJacking attack

### Requirements
- Go and it's binaries >= 1.13
- GitHub token, to run queries on GitHub API 


### Installation
```
pip install chainjacking
```

### Usage

CLI
```
python -m chainjacking -gt $GH_TOKEN
```

Arguments
- `-gt <token>` - GitHub access token, to run queries on GitHub API (required)
- `-p <path>` - Path to scan. (default=current directory)
- `-v` - Verbose output mode
- `-url <url>` - Scan one or more GitHub URLs
- `-f <path>` - Scan one or more GitHub URLs from a file separated by new-line


