{
  "added_at": "2026-11-02",
  "additional_evidence_urls": [
    "https://github.com/e-m-b-a/embark/wiki/Installation/f792ea4c9b1f2d3c495e942bcb780c654e7cd6e5",
    "https://github.com/e-m-b-a/embark/wiki/Web-interface/282863ab5b9c20f834e57c7aaa396171ab9a11ec",
    "https://github.com/e-m-b-a/embark/wiki/Orchestrator/2b58d1eda4bc9c5550db9e051db4dc894786fe26",
    "https://github.com/e-m-b-a/embark/blob/d578c8b102bd6a74f9efaeb5c7e93c601a5a9663/installer.sh",
    "https://github.com/e-m-b-a/embark/blob/d578c8b102bd6a74f9efaeb5c7e93c601a5a9663/run-server.sh",
    "https://github.com/e-m-b-a/embark/blob/d578c8b102bd6a74f9efaeb5c7e93c601a5a9663/docs/openapi.yaml",
    "https://github.com/e-m-b-a/embark/blob/d578c8b102bd6a74f9efaeb5c7e93c601a5a9663/VERSION.txt",
    "https://github.com/e-m-b-a/embark/blob/d578c8b102bd6a74f9efaeb5c7e93c601a5a9663/.gitmodules",
    "https://github.com/e-m-b-a/embark/blob/d578c8b102bd6a74f9efaeb5c7e93c601a5a9663/docker-compose.yml",
    "https://github.com/e-m-b-a/embark/tree/d578c8b102bd6a74f9efaeb5c7e93c601a5a9663/test",
    "https://github.com/e-m-b-a/embark/tree/d578c8b102bd6a74f9efaeb5c7e93c601a5a9663/.github/workflows",
    "https://github.com/e-m-b-a/embark/blob/d578c8b102bd6a74f9efaeb5c7e93c601a5a9663/LICENSE",
    "https://github.com/e-m-b-a/embark/releases/tag/v0.3"
  ],
  "category": "firmware",
  "description_en": "Web-based enterprise interface for the EMBA firmware security scanner, which it installs and runs as its scanning backend. In the browser, users upload firmware, configure and follow EMBA scans, open the full EMBA HTML report and a security overview per firmware, and compare results in an aggregated dashboard; results are access-controlled per user and can be archived. The current main branch adds a REST API for upload, scan status and SBOM retrieval, and an orchestrator that distributes scans to EMBA worker nodes reached over SSH.",
  "description_zh": "EMBA 固件安全扫描器的 Web 企业级界面，会安装 EMBA 并将其作为扫描后端运行。用户可在浏览器中上传固件、配置并跟踪 EMBA 扫描，查看完整的 EMBA HTML 报告和每个固件的安全概览，并在汇总仪表板中比较结果；结果按用户控制访问，也可归档隐藏。当前 main 分支还加入了用于上传、查询扫描状态和获取 SBOM 的 REST API，以及通过 SSH 将扫描分派到 EMBA 工作节点的编排器。",
  "entry_url": "https://awesomerea.org/resources/embark/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/embark/",
  "evidence_url": "https://github.com/e-m-b-a/embark/blob/d578c8b102bd6a74f9efaeb5c7e93c601a5a9663/README.md",
  "group": "tools",
  "id": "embark",
  "json_url": "https://awesomerea.org/resources/embark/record.json",
  "kind": "tool",
  "markdown_url": "https://awesomerea.org/resources/embark/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/embark/index.md",
  "name": "EMBArk",
  "name_zh": "EMBArk EMBA 固件扫描 Web 平台",
  "record_type": "resource",
  "relationship": "foundation",
  "requirements": [
    "Latest release at review: v0.3, published 2025-06-24. The reviewed main commit is 941 commits ahead of it and identifies itself as 0.3-630649d1 in VERSION.txt; the REST API and worker orchestrator described here come from that branch. The installation wiki calls the software alpha and strongly recommends a virtual machine, and the README notes that the new tracking application does not work offline and that device, vendor and version tracking is not yet in every dashboard.",
    "The README names Ubuntu 24 LTS as the only supported OS. installer.sh -d installs Docker, pipenv and EMBA and configures the MySQL and Redis containers defined in docker-compose.yml; EMBA is pinned as a git submodule (at review an EMBA commit from 2026-04-07, older than EMBA's latest releases) and runs in its Docker mode, while -s skips it. The wiki suggests 8–32+ GB RAM, 4–16+ CPUs, at least 20 GB of disk (100+ GB recommended) and an isolated network, and EMBA's own requirements also apply.",
    "run-server.sh serves HTTP on port 80 on all interfaces under the default name embark.local, which must resolve through a hosts file or DNS; -a adds names or addresses and -b opens the admin pages beyond localhost. The installer and server script run with sudo, and the server is deployed to /var/www under a dedicated service user. API calls carry an API key in a header or query parameter, and the orchestrator scans an IP range and installs EMBA on workers using SSH credentials the user supplies.",
    "Supply the firmware images yourself; the repository contains no firmware, and its test fixtures are EMBA result exports such as a CycloneDX SBOM and module CSV/JSON files. Scan findings come from EMBA and still need analyst interpretation. CI installs the server without EMBA and runs Django and server tests, linters, ShellCheck and CodeQL, so no firmware scan is part of it.",
    "MIT license, copyright The AMOS Projects and Siemens Energy AG; EMBA and the tools it installs keep their own licenses."
  ],
  "requirements_zh": [
    "审阅时最新版本为 v0.3，发布于 2025-06-24。所审阅的 main 分支提交比它多 941 个提交，VERSION.txt 标为 0.3-630649d1；这里描述的 REST API 和工作节点编排器均来自该分支。安装文档称软件仍处于 alpha 阶段，强烈建议在虚拟机中运行；README 说明新的追踪应用无法离线使用，设备、厂商和版本追踪也尚未接入所有仪表板。",
    "README 写明目前只支持 Ubuntu 24 LTS。installer.sh -d 会安装 Docker、pipenv 和 EMBA，并配置 docker-compose.yml 中定义的 MySQL 与 Redis 容器；EMBA 以 git 子模块固定版本（审阅时为 2026-04-07 的一个 EMBA 提交，早于 EMBA 最新发行版），以 Docker 模式运行；-s 选项则跳过 EMBA。文档建议 8–32+ GB 内存、4–16+ 个 CPU、至少 20 GB 磁盘（建议 100 GB 以上）及隔离网络，EMBA 自身的资源要求同样适用。",
    "run-server.sh 在所有网络接口的 80 端口提供 HTTP 服务，默认主机名为 embark.local，需要通过 hosts 文件或 DNS 解析；-a 可添加主机名或地址，-b 可让本机以外访问管理页面。安装脚本和服务启动脚本均需 sudo 运行，服务端以专用服务账户部署到 /var/www。API 调用需在请求头或查询参数中携带 API 密钥；编排器会扫描指定的 IP 范围，并使用用户提供的 SSH 凭据在工作节点上安装 EMBA。",
    "需自行提供要分析的固件镜像；仓库不含任何固件，测试数据是 EMBA 结果导出，例如一份 CycloneDX SBOM 和若干模块 CSV/JSON 文件。扫描结论来自 EMBA，仍需分析人员解读。CI 在不安装 EMBA 的情况下安装服务端，运行 Django 与服务端测试、代码检查、ShellCheck 和 CodeQL，并不包含固件扫描。",
    "采用 MIT 许可证，版权归 The AMOS Projects 与 Siemens Energy AG；EMBA 及其安装的工具各自保留许可证。"
  ],
  "targets": [
    "firmware"
  ],
  "url": "https://github.com/e-m-b-a/embark",
  "verification": "source-reviewed",
  "verified_at": "2026-10-20"
}