NestJS Security Scan

Defensive scan for NestJS 10.x / 11.x. Reports findings using the shared scoring schema.

Scope

• main.ts / bootstrap()
• *.controller.ts, *.gateway.ts, *.resolver.ts
• DTO files (*.dto.ts)
• Modules registering APP_GUARD, APP_PIPE, APP_FILTER, APP_INTERCEPTOR

Procedure

1. Read main.ts to confirm global pipes/guards/filters/helmet/CORS.
2. Walk every controller method for guards and DTOs.
3. Inspect DTO classes for class-validator decorators.

Rules