microsoft / binskim

A binary static analysis tool that provides security and correctness results for Windows Portable Executable and *nix ELF binary formats
Other
779 stars 156 forks source link

Add support for configuration files #1003

Open ThanyaLeif opened 3 months ago

ThanyaLeif commented 3 months ago

We would like to have the capability to use configuration files to specify a list of files for scanning. Currently, scanning an entire folder or a single file seems to be the primary method. By allowing configuration files as a target, our team will have more flexibility and control over our scanning process, enabling us to scan multiple specific files as defined in the configuration file.

Adding this capability will also implicitly support Linux environments. The current option of a response file relies on Windows-specific features and does not function properly in Linux.

AllDwarf commented 2 months ago

Hey @ThanyaLeif,

apologies for the delay. As of now you can leverage rsp(response files) files for multifile selection. So you can provide to BinSkim set of the paths/files to be used by BinSkim.

binskim analyze @rsp_file_name

Hopefully this one will help.

Thanks Marek