auditstatus / auditstatus.com / 22803246971

96%

push

github

feat: integrate process-integrity and release-verification checks

Wire Attestium's new ProcessIntegrity and ReleaseVerification modules
into the auditstatus server-check pipeline:

- Import attestium/process-integrity and attestium/release-verification
- Add checkProcessMemoryIntegrity() method that runs all five
  ProcessIntegrity checks (memory maps, executable page hashes, linker
  state, debugger attachment, file descriptors) and reports per-check
  pass/fail with details
- Add checkReleaseIntegrity() method that runs ReleaseVerification
  against the server's running Node.js, global packages, PM2, and
  installed modules, reporting per-category pass/fail
- Both checks are enabled by default, configurable via
  checkProcessIntegrity and checkReleaseVerification constructor options
- Add --no-process-integrity and --no-release-verification CLI flags
- Add --expected-libs CLI flag for specifying expected shared libraries
- Update module docblock to reflect new capabilities
- Add e2e-process-integrity.test.js with 357 lines of tests covering
  both new check integrations

Tests: 269 total, all passing.

503 of 538 branches covered (93.49%)

Branch coverage included in aggregate %.

146 of 167 new or added lines in 1 file covered. (87.43%)

2713 of 2813 relevant lines covered (96.45%)

11.2 hits per line