Cloudflare/vuln Scanner

@swamp/cloudflare/vuln-scannerv2026.10.23.1· AGPL-3.0-or-later· 3d agoBEHAVIORS

01README

Cloudflare vuln-scanner infrastructure models

02Release Notes

Updated: credential_sets
Updated: scans
Updated: target_environments

03Behaviors3

@swamp/cloudflare/vuln-scanner/credential-setsv2026.10.23.1credential_sets.ts

Global Arguments

Argument	Type	Required	Description
account_id	string	yes	Cloudflare account ID
name?	string	no	Human-readable name.
apiToken?	string	no	Cloudflare API token; overrides the CLOUDFLARE_API_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
apiKey?	string	no	Cloudflare API key for the legacy key+email auth path; overrides the CLOUDFLARE_API_KEY environment variable. Wire with a vault.get(...) expression. Requires email.
email?	string	no	Cloudflare account email for the legacy key+email auth path; overrides the CLOUDFLARE_EMAIL environment variable. Requires apiKey.

fn create()

Create a Credential Sets

fn get(id: string)

Get a Credential Sets

Argument	Type	Required	Description
id	string	yes	The ID of the Credential Sets

fn lookup(allowMissing?: boolean)

Look up an existing Credential Sets by matching global argument values and import it into state

Argument	Type	Required	Description
allowMissing?	boolean	no	Succeed and record found: false in lookupResult when nothing matches, instead of failing

fn adopt(id: string)

Import an existing Credential Sets by ID into state for management

Argument	Type	Required	Description
id	string	yes	The ID of the Credential Sets to import

fn update(identifier?: string)

Update Credential Sets attributes

Argument	Type	Required	Description
identifier?	string	no	Target a specific Credential Sets by id (e.g. one discovered by list)

fn delete(id: string)

Delete the Credential Sets

Argument	Type	Required	Description
id	string	yes	The ID of the Credential Sets

fn sync(identifier?: string)

Sync Credential Sets state from Cloudflare

Argument	Type	Required	Description
identifier?	string	no	Target a specific Credential Sets by id (e.g. one discovered by list)

Resources

state(infinite)— Credential Sets resource state

lookupResult(infinite)— Outcome of the most recent lookup

@swamp/cloudflare/vuln-scanner/scansv2026.10.23.1scans.ts

Global Arguments

Argument	Type	Required	Description
account_id	string	yes	Cloudflare account ID
name	string	yes	Instance name for this resource (used as the unique identifier in the factory pattern)
credential_sets?	object	no	Credential set references for a BOLA scan. The scanner uses the\n`owner` credentials for legitimate requests and the `attacker`\ncredentials to attempt unauthorized access.\n
open_api?	string	no	OpenAPI schema definition for the API under test. The scanner\nuses this to discover endpoints and construct requests.\n
scan_type?	enum	no
target_environment_id?	string	no	The target environment to scan.
apiToken?	string	no	Cloudflare API token; overrides the CLOUDFLARE_API_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
apiKey?	string	no	Cloudflare API key for the legacy key+email auth path; overrides the CLOUDFLARE_API_KEY environment variable. Wire with a vault.get(...) expression. Requires email.
email?	string	no	Cloudflare account email for the legacy key+email auth path; overrides the CLOUDFLARE_EMAIL environment variable. Requires apiKey.

fn create()

Create a Scans

fn get(id: string)

Get a Scans

Argument	Type	Required	Description
id	string	yes	The ID of the Scans

fn lookup(allowMissing?: boolean)

Look up an existing Scans by matching global argument values and import it into state

Argument	Type	Required	Description
allowMissing?	boolean	no	Succeed and record found: false in lookupResult when nothing matches, instead of failing

fn adopt(id: string)

Import an existing Scans by ID into state for management

Argument	Type	Required	Description
id	string	yes	The ID of the Scans to import

fn delete(id: string)

Delete the Scans

Argument	Type	Required	Description
id	string	yes	The ID of the Scans

fn sync(identifier?: string)

Sync Scans state from Cloudflare

Argument	Type	Required	Description
identifier?	string	no	Target a specific Scans by id (e.g. one discovered by list)

Resources

state(infinite)— Scans resource state

lookupResult(infinite)— Outcome of the most recent lookup

@swamp/cloudflare/vuln-scanner/target-environmentsv2026.10.23.1target_environments.ts

Global Arguments

Argument	Type	Required	Description
account_id	string	yes	Cloudflare account ID
description?	string	no	Optional description.
name?	string	no	Human-readable name.
target?	object	no
apiToken?	string	no	Cloudflare API token; overrides the CLOUDFLARE_API_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
apiKey?	string	no	Cloudflare API key for the legacy key+email auth path; overrides the CLOUDFLARE_API_KEY environment variable. Wire with a vault.get(...) expression. Requires email.
email?	string	no	Cloudflare account email for the legacy key+email auth path; overrides the CLOUDFLARE_EMAIL environment variable. Requires apiKey.

fn create()

Create a Target Environments

fn get(id: string)

Get a Target Environments

Argument	Type	Required	Description
id	string	yes	The ID of the Target Environments

fn lookup(allowMissing?: boolean)

Look up an existing Target Environments by matching global argument values and import it into state

Argument	Type	Required	Description
allowMissing?	boolean	no	Succeed and record found: false in lookupResult when nothing matches, instead of failing

fn adopt(id: string)

Import an existing Target Environments by ID into state for management

Argument	Type	Required	Description
id	string	yes	The ID of the Target Environments to import

fn update(identifier?: string)

Update Target Environments attributes

Argument	Type	Required	Description
identifier?	string	no	Target a specific Target Environments by id (e.g. one discovered by list)

fn delete(id: string)

Delete the Target Environments

Argument	Type	Required	Description
id	string	yes	The ID of the Target Environments

fn sync(identifier?: string)

Sync Target Environments state from Cloudflare

Argument	Type	Required	Description
identifier?	string	no	Target a specific Target Environments by id (e.g. one discovered by list)

Resources

state(infinite)— Target Environments resource state

lookupResult(infinite)— Outcome of the most recent lookup

04Previous Versions9

2026.10.20.1AGPL-3.0-or-laterOct 20, 2026

Updated: credential_sets
Updated: scans
Updated: target_environments

Modified 3 behaviors

2026.10.16.1AGPL-3.0-or-later(was none)Oct 16, 2026

2026.10.13.1Oct 13, 2026

Updated: credential_sets
Updated: scans
Updated: target_environments

2026.09.29.1Sep 29, 2026

Updated: credential_sets
Updated: scans
Updated: target_environments

2026.07.21.1Jul 21, 2026

Updated: credential_sets
Updated: scans
Updated: target_environments

2026.07.18.2Jul 18, 2026

Modified 3 behaviors

2026.06.08.2Jun 8, 2026

Updated: credential_sets
Updated: scans
Updated: target_environments

2026.05.29.1May 29, 2026

Updated: credential_sets
Updated: scans
Updated: target_environments

2026.05.22.1May 22, 2026

Added: credential_sets
Added: scans
Added: target_environments

05Stats

100 / 100

Downloads

Archive size

15.6 KB

Verified by Swamp

Has README or module doc2/2earned
README has a code example1/1earned
README is substantive1/1earned
Most symbols documented1/1earned
No slow types (deprecated)1/1earned
Dependencies pass trust audit2/2earned
Docs keep secrets in a vault1/1earned
Has description1/1earned
Platform support declared (or universal)2/2earned
License2/2earned
Verified public repository2/2earned

Repository

https://github.com/swamp-club/swamp-extensions

06Platforms

linux · x86_64 linux · aarch64 macOS · x86_64 macOS · aarch64 windows · x86_64

07Labels

#cloudflare #vuln-scanner #cloud #infrastructure