joelsec - Security Analysis Toolchain
joelsec is the command-line tool for security analysis, vulnerability detection, and code safety verification.
Installation
joelsec is included with JOEL:
joelsec --versionQuick Start
# Security scan
joelsec scan app.joel
# Vulnerability check
joelsec check app.joel
# Security audit
joelsec audit app.joelSecurity Scanning
Scan code for security issues:
# Full security scan
joelsec scan app.joel
# Scan with specific rules
joelsec scan app.joel --rules sql-injection,xss
# Scan directory
joelsec scan src/ --recursive
# Scan with output
joelsec scan app.joel --output report.json
# Scan with severity filter
joelsec scan app.joel --severity high,criticalVulnerability Detection
Detect security vulnerabilities:
# Check for vulnerabilities
joelsec check app.joel
# Check dependencies
joelsec check app.joel --dependencies
# Check for known CVEs
joelsec check app.joel --cve
# Check smart contracts
joelsec check contract.joel --contract
# Generate vulnerability report
joelsec check app.joel --output vulns.jsonStatic Analysis
Perform static security analysis:
# Static analysis
joelsec analyze app.joel
# Analyze with taint tracking
joelsec analyze app.joel --taint
# Analyze data flow
joelsec analyze app.joel --data-flow
# Analyze control flow
joelsec analyze app.joel --control-flowCode Auditing
Audit code for security compliance:
# Security audit
joelsec audit app.joel
# Audit with standards
joelsec audit app.joel --standard OWASP
# Audit smart contracts
joelsec audit contract.joel --standard smart-contract
# Generate audit report
joelsec audit app.joel --output audit.htmlSandbox Testing
Test code in sandboxed environment:
# Run in sandbox
joelsec sandbox app.joel
# Sandbox with restrictions
joelsec sandbox app.joel --restrict network,file
# Sandbox with timeout
joelsec sandbox app.joel --timeout 30Cryptographic Verification
Verify cryptographic implementations:
# Verify crypto usage
joelsec crypto app.joel
# Verify key management
joelsec crypto app.joel --keys
# Check encryption
joelsec crypto app.joel --encryptionExamples
Security Scan
# Scan for vulnerabilities
joelsec scan app.joel --output scan.json
# Review results
joelsec report scan.jsonSmart Contract Audit
# Audit smart contract
joelsec audit contract.joel --standard smart-contract
# Check for common vulnerabilities
joelsec check contract.joel --contractCommand Reference
Scanning Commands
joelsec scan <file>- Security scanjoelsec check <file>- Vulnerability checkjoelsec analyze <file>- Static analysis
Auditing Commands
joelsec audit <file>- Security auditjoelsec sandbox <file>- Sandbox testingjoelsec crypto <file>- Cryptographic verification