Electron 应用安全

您还可以使用与 CLI 类似的选项，以编程方式使用电负性electronegativity：

const run = require('@doyensec/electronegativity')// or: import run from '@doyensec/electronegativity';run({  // input (directory, .js, .html, .asar)  input: '/path/to/electron/app',  // save the results to a file in csv or sarif format (optional)  output: '/path/for/output/file',  // true to save output as sarif, false to save as csv (optional)  isSarif: false,  // only run the specified checks (optional)  customScan: ['dangerousfunctionsjscheck', 'remotemodulejscheck'],  // only return findings with the specified level of severity or above (optional)  severitySet: 'high',  // only return findings with the specified level of confidence or above (optional)  confidenceSet: 'certain',  // show relative path for files (optional)  isRelative: false,  // run Electron upgrade checks, eg -u 7..8 to check upgrade from Electron 7 to 8 (optional)  electronUpgrade: '7..8',  // assume the set Electron version, overriding the detected one  electronVersion: '5.0.0',  // use additional parser plugins  parserPlugins: ['optionalChaining']})    .then(result => console.log(result))    .catch(err => console.error(err));

结果包含全局和原子检查的数量、解析时遇到的任何错误以及发现的问题数组，如下所示：

{  globalChecks: 6,  atomicChecks: 36,  errors: [    {      file: 'ts/main/main.ts',      sample: 'shell.openExternal(url);',      location: { line: 328, column: 4 },      id: 'OPEN_EXTERNAL_JS_CHECK',      description: 'Review the use of openExternal',      properties: undefined,      severity: { value: 2, name: 'MEDIUM', format: [Function: format] },      confidence: { value: 0, name: 'TENTATIVE', format: [Function: format] },      manualReview: true,      shortenedURL: 'https://git.io/JeuMC'    },    {      file: 'ts/main/main.ts',      sample: 'const popup = new BrowserWindow(options);',      location: { line: 340, column: 18 },      id: 'CONTEXT_ISOLATION_JS_CHECK',      description: 'Review the use of the contextIsolation option',      properties: undefined,      severity: { value: 3, name: 'HIGH', format: [Function: format] },      confidence: { value: 1, name: 'FIRM', format: [Function: format] },      manualReview: false,      shortenedURL: 'https://git.io/Jeu1p'    }  ]}