AppInspector (resource)

[timconsidine]

AppInspector is now running at https://appinspector.appx.uk as an open resource site for checking Cloudron community app packages. Very simple.

Main Inspector Page

• give it a CloudronVersions link and get a report
• the score is deliberately framed conservatively : this is not a certification or safety guarantee.

Helper pages :

• pulls app list from ca.cloudron.io purely as a convenience tool (don't have to go hunting for the CloudronVersions link) and could later hold a counter for [I installed this]
• list of packagers with apps packaged and a forum profile link (addresses an info request which was mentioned elsewhere).

AppInspector needs better / deeper tests. This is a first-pass release. Feel free to suggest automated scripted tests that you want.

AppInspector is not posted to ca.cloudron.io, because the point is for it to be open transparency tooling, rather than become a community app itself.

Source is available, and if anyone really wants to self-host it, then the link is :
https://communityapps.appx.uk/cloudron-appinspector/CloudronVersions.json

Source: https://forgejo.tcjc.uk/cca/cloudron-appinspector

[timconsidine]

I don't know who 'EmbedLabs' is on the forum - do let me know.

[timconsidine]

AppInspector (https://appinspector.appx.uk/) is now updated with the output of trivy and grype so that known CVE (vulnerability and exploits) of a Community App are shown below the app inspection results.

Source code and CloudronVersions.json remain the same as original topic post.

Can't believe anyone would want to install this on their Cloudron, no installation required, it's intended as a common resource public website.

[robi]

This post is deleted!

[timconsidine]

@robi ooops, thanks for the nudge.