Loading SOVA...
Loading SOVA...
Get up and running with SOVA in under two minutes. Install via npm, scan any project, and generate your first dependency manifest.
Install SOVA globally via npm:
$ npm install -g @securenexus/sova
added 1 package in 3.2s
Verify the installation:
$ sova --version
1.0.0
Air-Gapped Environments
For environments without npm registry access, download the .tgz package, transfer via approved media, and install locally:
$ npm install -g ./securenexus-sova-1.0.0.tgz
Point SOVA at any project directory:
$ sova scan --path /path/to/your/project
This writes sova-manifest.json in the current working directory (not in the project). To control the output location:
$ sova scan --path /path/to/your/project --output ./my-manifest.json
Run sova with no arguments to enter guided interactive mode:
$ sova
SOVA will prompt you for a project path, confirm the scan configuration, run the scan, and print a summary. Interactive mode uses sensible defaults: dev dependencies included, all languages, depth 10.
SOVA interactive mode — the CLI prompts you through each step of the scan configuration.
After a scan, SOVA prints a summary to your terminal:
SOVA can also be used programmatically in your Node.js applications:
import { scanProject } from '@securenexus/sova';
// Scan a project directory
const manifest = await scanProject({ path: '/path/to/project' });
console.log(manifest.scan.totalDependencies); // e.g. 312
console.log(manifest.securitySignals.critical); // e.g. 0
Upload the generated sova-manifest.json to securenexus.ai to generate a full SBOM and vulnerability report.