SecureLoop AI | Web Security Assessment Prototype

@router.post("/start", response_model=ScanStartResponse)
async def start_scan(request: ScanRequest, background_tasks: BackgroundTasks):
    # Explicit authorization check required by policy
    if not request.authorized:
        raise HTTPException(
            status_code=400,
            detail="Explicit scan authorization must be confirmed before proceeding."
        )
    
    scan_id = str(uuid.uuid4())
    scan_store[scan_id] = {
        "status": "queued",
        "target": str(request.target_url),
        "created_at": datetime.utcnow().isoformat(),
        "findings": []
    }
    
    background_tasks.add_task(run_nuclei_scan_task, scan_id, str(request.target_url))
    return ScanStartResponse(scan_id=scan_id, status="queued")

async def run_nuclei_scan(target_url: str, output_path: str) -> List[Dict[str, Any]]:
    if not is_nuclei_available():
        logger.warning("Nuclei binary not detected. Returning simulated development findings.")
        return get_simulated_development_findings(target_url)
        
    cmd = [
        "nuclei",
        "-u", target_url,
        "-jsonl",
        "-o", output_path,
        "-silent"
    ]
    process = await asyncio.create_subprocess_exec(
        *cmd,
        stdout=asyncio.subprocess.PIPE,
        stderr=asyncio.subprocess.PIPE
    )
    await process.wait()
    return parse_nuclei_jsonl(output_path)

def check_lab_status(container_name: str = "secureloop-dvwa-lab") -> Dict[str, Any]:
    try:
        client = docker.from_env()
        container = client.containers.get(container_name)
        return {
            "name": container_name,
            "status": container.status,
            "reachable": ping_container_endpoint(container)
        }
    except docker.errors.NotFound:
        return {"name": container_name, "status": "not_found", "reachable": False}