Function execute

worker/src/components/security/naabu.ts:305–437

({ inputs, params }, context)

    description: 'Fast TCP port scanner (Naabu).',
  },
  async execute({ inputs, params }, context) {
    const parsedParams = parameterSchema.parse(params);
    const trimmedPorts = parsedParams.ports?.trim();
    const trimmedExclude = parsedParams.excludePorts?.trim();
    const trimmedInterface = parsedParams.interface?.trim();

    const effectiveOptions = {
      ports: trimmedPorts && trimmedPorts.length > 0 ? trimmedPorts : undefined,
      topPorts: parsedParams.topPorts,
      excludePorts: trimmedExclude && trimmedExclude.length > 0 ? trimmedExclude : undefined,
      rate: parsedParams.rate,
      retries: parsedParams.retries ?? 1,
      enablePing: parsedParams.enablePing ?? false,
      interface: trimmedInterface && trimmedInterface.length > 0 ? trimmedInterface : undefined,
    };

    context.logger.info(
      `[Naabu] Scanning ${inputs.targets.length} target(s) with options: ports=${effectiveOptions.ports ?? 'default'}, topPorts=${effectiveOptions.topPorts ?? 'default'}, rate=${effectiveOptions.rate ?? 'auto'}, retries=${effectiveOptions.retries}`,
    );

    context.emitProgress({
      message: 'Launching Naabu port scan…',
      level: 'info',
      data: { targets: inputs.targets.slice(0, 5) },
    });

    const tenantId = (context as any).tenantId ?? 'default-tenant';
    const volume = new IsolatedContainerVolume(tenantId, context.runId);
    const baseRunner = definition.runner;

    if (baseRunner.kind !== 'docker') {
      throw new ContainerError('Naabu runner is expected to be docker-based.', {
        details: { expectedKind: 'docker', actualKind: baseRunner.kind },
      });
    }

    let rawOutput: string;
    try {
      // Write targets to input file
      const inputFiles: Record<string, string> = {
        [TARGETS_FILE_NAME]: inputs.targets.join('\n'),
      };

      const volumeName = await volume.initialize(inputFiles);
      context.logger.info(`[Naabu] Created isolated volume: ${volumeName}`);

      // Build naabu CLI arguments in TypeScript
      const naabuArgs = buildNaabuArgs({
        targetFile: `${CONTAINER_INPUT_DIR}/${TARGETS_FILE_NAME}`,
        ...effectiveOptions,
      });

      const runnerConfig: DockerRunnerConfig = {
        kind: 'docker',
        image: baseRunner.image,
        network: baseRunner.network,
        timeoutSeconds: baseRunner.timeoutSeconds ?? dockerTimeoutSeconds,
        env: { ...(baseRunner.env ?? {}) },