Seekret:GitHub仓库和目录敏感信息搜索工具

go get github.com/apuigsech/seekret/cmd/seekret

NAME:
   seekret - seek for secrets on various sources.
USAGE:
   seekret [global options] command [command options] [arguments...]
VERSION:
   0.0.1
AUTHOR(S):
   Albert Puigsech Galicia <[email protected]>
COMMANDS:
   seek:
     git    从git仓库中搜索敏感信息。
     dir    搜索文件夹下的敏感信息。
GLOBAL OPTIONS:
   --exception FILE, -x FILE    从FILE中加载exceptions。
   --rules PATH         rules的路径。[$SEEKRET_RULES_PATH]
   --format value, -f 指定输出格式.(默认："human")
   --known FILE, -k FILE  从FILE中加载known secrets。
   --workers value, -w value  检查时使用的线程个数（默认：4）
   --help, -h           显示帮助信息
   --version, -v        打印版本号
-x, --exception
--rules
-f, --format
-k, --known
-w, --workers

NAME:
   seekret git - 搜索仓库里的敏感信息。
USAGE:
   seekret git [command options] [arguments...]
CATEGORY:
   seek
OPTIONS:
   --count value, -c value  (default: 0)
-c, --count

NAME:   seekret dir - 搜文件夹下的敏感信息。USAGE:   seekret dir [command options] [arguments...]
CATEGORY:   seekOPTIONS:   --recursive, -r   --hidden-r, --recursive-h, --hidden

seekret git /path/to/repo

seekret git http://github.com/apuigsech/seekret-exposed

seekret git --count 1 /path/to/repo

seekret dir --recursive --hidden /path/to/dir

seekret --rules $GOPATH/src/github.com/apuigsech/seekret/rules/ git https://github.com/apuigsech/seekret-secrets.git

git clone https://github.com/apuigsech/seekret-secrets.git /tmp/seekret-secretsseekret --rules $GOPATH/src/github.com/apuigsech/seekret/rules/ git /tmp/seekret-secrets

seekret --rules $GOPATH/src/github.com/apuigsech/seekret/rules/ git -c 2 /tmp/seekret-secrets

seekret --rules $GOPATH/src/github.com/apuigsech/seekret/rules/ -x /tmp/seekret-secrets/.exception_1 git /tmp/seekret-secrets

import seekret "github.com/apuigsech/seekret/lib"

s := seekret.NewSeekret()

s.LoadRulesFromPath("/path/to/main/rues:/path/to/other/rules:/path/to/more/rules")s.LoadRulesFromDir("/path/to/rules")s.LoadRulesFromFile("/path/to/file.rule")

opts := map[string]interface{} {
  "hidden": true,
  "recursive": false,
}
s.LoadObjects("dir", "/path/to/inspect", opts)
opts := map[string]interface{} {
  "count": 10,
}
s.LoadObjects("dir", "/repo/to/inspect", opts)

s.LoadExceptionsFromFile("/path/to/exceptions/file")

s.Inspect(5)

secretsList := s.ListSecrets()

rulename:
  match: [regexp]
  unmatch:
    - [regexp]
    - [regexp]
    - ...

...
-
  rule: [rulename]
  object: [regexp]
  line: [linenumber]
  content: [regexp]
-
  ...