crates-pro / sensleak-rs

MIT License
20 stars 8 forks source link

Version: 0.2.0_apply scan leaks on git repository #5

Closed sonichen closed 1 year ago

sonichen commented 1 year ago

Version: 0.2.0

Goal Perform leaks scanning on the local repository

Implemented details After comparing gitoxide and git2, considering the ease of use and other factors, I decided to use git2 for interacting with git repositories. The following functions have been added to the project: --commit=: Specify the SHA of the commit to scan or use "latest" to scan the last commit of the repository. --commits=: Provide a comma-separated list of commits to scan. --commits-file=: Specify a file containing a new line-separated list of commits to scan. --commit-from=: Start scanning from the specified commit. --commit-to=: Stop scanning at the specified commit. --commit-since=: Scan commits more recent than a specific date. The format should be '2006-01-02' or '2006-01-02T15:04:05-0700'. --commit-until=: Scan commits older than a specific date. The format should be '2006-01-02' or '2006-01-02T15:04:05-0700'.

Future work

  1. Add the following functions: --disk: Clone repo(s) to disk. --files-at-commit=: Specify the SHA of a commit to scan all files at that commit. --uncommitted: Run gitleaks on uncommitted code. --owner-path=: Path to the owner directory (repos discovered). --branch=: Branch to scan. --redact: Redact secrets from log messages and leaks. --debug: Log debug messages. --user=: Specify the user to scan.
  2. Improve error handling in the program.