ahrav
936a139596
Lint / lint (push) Waiting to run
Release / Release (push) Waiting to run
Scan for secrets / test (push) Waiting to run
Snifftest / Run Snifftest (push) Waiting to run
Test / test (push) Waiting to run
Test / test-detectors (push) Waiting to run
* Allow using a glob for include list. * Update command flag. * Make comment more clear. * update comment. * Allow scanning repo and org at the same time.
58 lines
1.6 KiB
Go
58 lines
1.6 KiB
Go
package engine
|
|
|
|
import (
|
|
"github.com/sirupsen/logrus"
|
|
"google.golang.org/protobuf/proto"
|
|
"google.golang.org/protobuf/types/known/anypb"
|
|
|
|
"github.com/trufflesecurity/trufflehog/v3/pkg/common"
|
|
"github.com/trufflesecurity/trufflehog/v3/pkg/context"
|
|
"github.com/trufflesecurity/trufflehog/v3/pkg/pb/sourcespb"
|
|
"github.com/trufflesecurity/trufflehog/v3/pkg/sources"
|
|
"github.com/trufflesecurity/trufflehog/v3/pkg/sources/github"
|
|
)
|
|
|
|
// ScanGitHub scans Github with the provided options.
|
|
func (e *Engine) ScanGitHub(ctx context.Context, c sources.Config) error {
|
|
source := github.Source{}
|
|
|
|
connection := sourcespb.GitHub{
|
|
Endpoint: c.Endpoint,
|
|
Organizations: c.Orgs,
|
|
Repositories: c.Repos,
|
|
ScanUsers: c.IncludeMembers,
|
|
IgnoreRepos: c.ExcludeRepos,
|
|
IncludeRepos: c.IncludeRepos,
|
|
}
|
|
if len(c.Token) > 0 {
|
|
connection.Credential = &sourcespb.GitHub_Token{
|
|
Token: c.Token,
|
|
}
|
|
} else {
|
|
connection.Credential = &sourcespb.GitHub_Unauthenticated{}
|
|
}
|
|
connection.IncludeForks = c.IncludeForks
|
|
var conn anypb.Any
|
|
err := anypb.MarshalFrom(&conn, &connection, proto.MarshalOptions{})
|
|
if err != nil {
|
|
logrus.WithError(err).Error("failed to marshal github connection")
|
|
return err
|
|
}
|
|
err = source.Init(ctx, "trufflehog - github", 0, 0, false, &conn, c.Concurrency)
|
|
if err != nil {
|
|
logrus.WithError(err).Error("failed to initialize github source")
|
|
return err
|
|
}
|
|
|
|
e.sourcesWg.Add(1)
|
|
go func() {
|
|
defer common.RecoverWithExit(ctx)
|
|
defer e.sourcesWg.Done()
|
|
err := source.Chunks(ctx, e.ChunksChan())
|
|
if err != nil {
|
|
logrus.WithError(err).Fatal("could not scan github")
|
|
}
|
|
}()
|
|
return nil
|
|
}
|