Skip to content

Add caddy-analyzer - #6622

Open
lenny-ts wants to merge 4 commits into
avelino:mainfrom
lenny-ts:add-caddy-analyzer
Open

Add caddy-analyzer#6622
lenny-ts wants to merge 4 commits into
avelino:mainfrom
lenny-ts:add-caddy-analyzer

Conversation

@lenny-ts

@lenny-ts lenny-ts commented Aug 27, 2026

Copy link
Copy Markdown

Forge link: https://github.com/lenny-ts/caddy-analyzer

caddy-analyzer is a security-focused log analyzer for Caddy v2's structured JSON logs. It features a dual-pass detection engine covering 26 attack categories (SQLi, XSS, SSRF, RCE, SSTI, Log4j, XXE, CRLF, JWT abuse, beaconing/C2, scanner detection), all tagged with MITRE ATT&CK technique IDs. The guard subcommand provides real-time iptables blocking with sliding window rate limiting, 8 blocklist feeds (Spamhaus, FireHOL, Tor, AbuseIPDB), GeoIP enrichment via offline mmdb, and Sigma export for SIEM integration. Supports files, Docker, Kubernetes, and journalctl as input sources.

@github-actions

github-actions Bot commented Aug 27, 2026

Copy link
Copy Markdown

Automated Quality Checks

Required checks

Repo: accessible, has go.mod and SemVer release
pkg.go.dev: missing from PR body

How to fix: Add the following to your PR description:

pkg.go.dev: https://pkg.go.dev/github.com/your-org/your-project

❌ **Go Report Card**: missing from PR body
  > **How to fix:** Add the following to your PR description:
  > ```
goreportcard.com: https://goreportcard.com/report/github.com/lenny-ts/caddy-analyzer

Additional checks

License: MIT
⚠️ Maturity: repo appears to have less than 5 months of history

How to fix: Your repository needs at least 5 months of history since the first commit.
Please resubmit after the repository meets this requirement.
CI/CD: GitHub Actions workflows detected
README: present
⚠️ Coverage: missing from PR body
How to fix: Add a coverage service link to your PR description:

Coverage: https://app.codecov.io/gh/your-org/your-project

Popular options: [Codecov](https://codecov.io), [Coveralls](https://coveralls.io). Integrate one with your CI to track coverage automatically.

---
> **Action needed:** one or more required checks failed. Please update your PR body with the missing links and ensure the repository meets the [quality standards](https://github.com/avelino/awesome-go/blob/main/CONTRIBUTING.md#quality-standards).

_These checks are automated and do not replace maintainer review. See [CONTRIBUTING.md](https://github.com/avelino/awesome-go/blob/main/CONTRIBUTING.md) for full guidelines._

---

## PR Diff Validation

### Content checks

✅ **Files changed**: only README.md
✅ **Single item**: one package added
✅ **Link consistency**: README link matches forge link in PR body
✅ **Link text**: matches repository name
✅ **Description**: ends with punctuation
✅ **Description tone**: no promotional language detected
✅ **Category size**: DevOps Tools has 108 items


_Automated diff validation — does not replace maintainer review._
<!-- Sticky Pull Request Commentpr-quality-check -->

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants