Typescript security scanner

A system for scanning software code, the system comprising:

• a repository which comprises a first set of software instructions that includes a first set of software source code created in a first programming language;
• a code build system which comprises a transpiler to which the first set of software instructions are provided;
• processing instructions which cause the transpiler to transpile the first set of software instructions to generate a second set of software instructions that includes a second set of software source code created in a second programming language that is readable by a code scanner;
• processing instructions which cause the code build system to subject the second set of software instructions to a de-obfuscation process which produces a third set of software instructions that includes a third set of software source code which are arranged into rows, each row having a single code element;
• processing instructions that cause the transpiler to generate a first cross reference map file which maps items in the second set of software instructions and corresponding items in the first set of software instructions;
• processing instructions that cause the transpiler to generate a second cross reference map file which comprises references between items in the third set of software instructions and corresponding items in the first set of software instructions;
• the code scanner to which the third set of software instructions are provided;
• processing instructions that cause the code scanner to scan the third set of software instructions and produce a matched result that includes at least one source code segment of interest;
• and
• processing instructions that cause the code build system to match the scan result to elements of the first set of software instructions using the first cross reference map file and the second cross reference map file to produce a matched result that includes a location in the first set of software instructions corresponding to the at least one source code segment.

A method of scanning software code, the method comprising:

• receiving a first set of software instructions that includes a first set of software source code created in a first programming language;
• transpiling the first set of software instructions to generate a second set of software instructions that includes a second set of software source code created in a second programming language that is readable by a code scanner;
• generating a first cross reference map file which maps items in the second set of software instructions to corresponding items in the first set of software instructions;
• scanning the second set of software instructions to produce a scan result that includes at least one source code segment of interest;
• and
• matching the scan result produced by the code scanner to elements of the first set of software instructions using the first cross reference map file to produce a translated result that includes a location in the first set of software instructions corresponding to the at least one source code segment.