surma/sausage
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

throwaway: secrets scan probe (card 74), no awk
scan / scan (push) Successful in 8s
Details

Browse Source
This commit is contained in:
Sausage Agent
2026-10-16 20:38:26 +00:00
parent 31834388e1
commit aeccd24690
1 changed files with 2 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/ci.yml
+2 -4
View File
@@ -14,13 +14,11 @@ jobs:
fetch-depth: 0 fetch-depth: 0
- name: all branches - name: all branches
run: git fetch origin '+refs/heads/*:refs/remotes/origin/*' && git branch -a && git rev-list --all | wc -l run: git fetch origin '+refs/heads/*:refs/remotes/origin/*' && git branch -a && git rev-list --all | wc -l
- name: gitleaks (redacted)
run: nix run nixpkgs#gitleaks -- detect --source . --log-opts=--all --redact -v --no-banner || true
- name: pattern scan (file names only) - name: pattern scan (file names only)
run: | run: |
scan() { scan() {
echo "== $1" echo "== $1"
git rev-list --all | xargs -n 20 git grep -lIE "$1" | awk -F: '{print $2}' | sort | uniq -c || true git rev-list --all | xargs -n 20 git grep -lIE "$1" | cut -d: -f2 | sort | uniq -c || true
} }
scan 'BEGIN [A-Z ]*PRIVATE KEY' scan 'BEGIN [A-Z ]*PRIVATE KEY'
scan 'sk-[A-Za-z0-9_-]{16,}' scan 'sk-[A-Za-z0-9_-]{16,}'
@@ -40,4 +38,4 @@ jobs:
scan 'vendors\.llm' scan 'vendors\.llm'
scan 'citadel|nexus' scan 'citadel|nexus'
echo "== all files ever" echo "== all files ever"
git rev-list --all | xargs -n 20 git ls-tree -r --name-only | sort -u | wc -l git rev-list --all | xargs -n 1 git ls-tree -r --name-only | sort -u