Skip to content

Diver - Look for leaked file #46

Open
@pylapp

Description

@pylapp

As a GitHub administrator
I want to make analysis of source file to find specific files
So that I can check if there some projects with credentials leaks

By "specific files" it means files in a black-lis,t like "keystore.jks", "id.rsa", "id.rsa_pub"

Step to follow:

Get All Repositories From Organisation
For Each Repository: Clone it
For Each Clone:
        For Each File Name Regex In Blacklist
             Look Recursively For File In Directory
        End For Each
End For Each
Build Final Report

Note: Add entry in wiki to run this script in all repositories clones

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or requestfeature-diverEnhancement related to the diver featurefeature-newEnhancement for a new feature (which has not its GitHub label)

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions