dverbeeck / cisa_stoat Goto Github PK

The Scoring Threat Objects Analysis Tool (STOAT) web application takes software described in the STIX 2.1 format and automates an initial socre based on the software's weaknesses. Then, customers can edit the weakness score to best reflect their environment, notes, and considerations before its out as STIX 2.1.

Make sure to set up OrientDB before starting STOAT. STOAT has been tested with OrientDB 3.0.32.

Use the command npm run setup to set the environment variables and install all the dependencies.

Then type npm start to start the application.

React should open the app in the browser automatically. If it doesn't, navigate to http://localhost:3000.

You should only need to run npm run setup once, unless you need to change the environment variables. If you want to install/update dependencies without setting up environment variables, use npm run update. If you want to set up environment variables without installing dependencies, either edit the .env files directly (as explained below) or run ./setup.sh.

Both the api and the client use environment variables stored in a .env file. The setup script npm run setup will set these up automatically. Here is a reference to what variables are used and what they mean.