master

Author: ismailtsdln

.github/workflows/scan.yml

@@ -0,0 +1,32 @@
+name: ApkSentinel Scan
+
+on:
+  push:
+    branches: [ main ]
+  pull_request:
+    branches: [ main ]
+
+jobs:
+  scan:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+
+      - name: Set up Go
+        uses: actions/setup-go@v4
+        with:
+          go-version: '1.25'
+
+      - name: Install jadx
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y jadx
+
+      - name: Build ApkSentinel
+        run: go build -v -o apk-sentinel cmd/apk-sentinel.go
+
+      - name: Run Scan
+        run: |
+          # Example scan on a sample APK if available, or just test build
+          # ./apk-sentinel -i samples/test.apk -o results -f both
+          ./apk-sentinel --help

.gitlab-ci.yml

@@ -0,0 +1,25 @@
+image: golang:1.24
+
+stages:
+  - build
+  - scan
+
+build_job:
+  stage: build
+  script:
+    - go build -v -o apk-sentinel cmd/apk-sentinel.go
+  artifacts:
+    paths:
+      - apk-sentinel
+
+scan_job:
+  stage: scan
+  before_script:
+    - apt-get update && apt-get install -y jadx
+  script:
+    - ./apk-sentinel --help
+    # Example scan:
+    # - ./apk-sentinel -i your-app.apk -o results -f both
+  artifacts:
+    paths:
+      - report/

apk-sentinel

@@ -47,8 +47,8 @@ detect hard-coded secrets, API keys, and sensitive URLs in Android applications.
 		// 2. Scan
 		patternFile := customPatterns
 		if patternFile == "" {
-			// fallback to default patterns
-			patternFile = "internal/patterns/default_patterns.json"
+			// fallback to default patterns directory
+			patternFile = "internal/patterns"
 		}
 
 		s, err := scanner.NewScanner(patternFile)

cmd/apk-sentinel.go

@@ -40,30 +40,56 @@ type Scanner struct {
 	context  *regexp.Regexp
 }
 
-// NewScanner initializes a Scanner with patterns from a JSON file.
-func NewScanner(patternFilePath string) (*Scanner, error) {
-	data, err := os.ReadFile(patternFilePath)
+// NewScanner initializes a Scanner with patterns from one or more JSON files.
+func NewScanner(patternPath string) (*Scanner, error) {
+	var patternFiles []string
+
+	info, err := os.Stat(patternPath)
 	if err != nil {
-		return nil, fmt.Errorf("failed to read pattern file: %w", err)
+		return nil, fmt.Errorf("failed to access pattern path: %w", err)
 	}
 
-	var config struct {
-		Patterns []Pattern `json:"patterns"`
-	}
-	if err := json.Unmarshal(data, &config); err != nil {
-		return nil, fmt.Errorf("failed to unmarshal patterns: %w", err)
+	if info.IsDir() {
+		files, err := os.ReadDir(patternPath)
+		if err != nil {
+			return nil, fmt.Errorf("failed to read pattern directory: %w", err)
+		}
+		for _, f := range files {
+			if !f.IsDir() && filepath.Ext(f.Name()) == ".json" {
+				patternFiles = append(patternFiles, filepath.Join(patternPath, f.Name()))
+			}
+		}
+	} else {
+		patternFiles = append(patternFiles, patternPath)
 	}
 
-	for i := range config.Patterns {
-		re, err := regexp.Compile(config.Patterns[i].Regex)
+	var allPatterns []Pattern
+	for _, pf := range patternFiles {
+		data, err := os.ReadFile(pf)
 		if err != nil {
-			return nil, fmt.Errorf("invalid regex for pattern %s: %w", config.Patterns[i].Name, err)
+			continue // Skip unreadable files
 		}
-		config.Patterns[i].Compiled = re
+
+		var config struct {
+			Patterns []Pattern `json:"patterns"`
+		}
+		if err := json.Unmarshal(data, &config); err == nil {
+			for i := range config.Patterns {
+				re, err := regexp.Compile(config.Patterns[i].Regex)
+				if err == nil {
+					config.Patterns[i].Compiled = re
+					allPatterns = append(allPatterns, config.Patterns[i])
+				}
+			}
+		}
+	}
+
+	if len(allPatterns) == 0 {
+		return nil, fmt.Errorf("no valid patterns found in %s", patternPath)
 	}
 
 	return &Scanner{
-		Patterns: config.Patterns,
+		Patterns: allPatterns,
 		resolver: analyzer.NewObfuscationResolver(),
 		context:  regexp.MustCompile(`(?i)(api|key|secret|token|auth|pwd|pass|private|access)`),
 	}, nil