boringtools / git-alerts

Tool to detect and monitor GitHub org users' public repositories for secrets and sensitive files
Apache License 2.0
196 stars 6 forks source link

Allow scan public repos without PAT #20

Closed benner closed 6 months ago

benner commented 9 months ago

Hello,

Awesome tool!

It would be great if scanning/monitoring for public repos will not require GITHUB_PAT.

c0d3G33k commented 9 months ago

Hi @benner ,

Thanks, GitHub only allows 60 requests per hour for unauthenticated API requests, The tool will be more unstable while scanning the larger organizations without the PAT. Let me know your thoughts

benner commented 9 months ago

For my case it's enough. Maybe this can be extra flag for this...

c0d3G33k commented 6 months ago

@benner, this feature will be released in the attached PR.