使用 git-hound 在 GitHub 上扫描泄露的密钥和暴露的凭证
Search public GitHub broadly for leaked secrets and triage exposures when the workflow is recon and remediation, not generic secret scanning.
Prerequisites
git-hound binary, GitHub token or code search access, and operator-defined dork queries
Installation
Use the upstream install or setup path that matches your environment:
- docker build -t my-githound-container .
- docker run -v /path/to/config.yaml:/root/.githound/config.yaml -v $(pwd)/data:/data my-githound-container --subdomain-file /data/subdomains.txt
Requirements and caveats from upstream:
- ## Building the Docker Image
- To build the Docker image for Git-Hound, use the following command:
- This command builds the Docker image with the tag my-githound-container. You can change the tag name to your preference.
Basic usage or getting-started notes:
- Example config.yaml:
- Use the following command to run the container with your configuration and input files:
- Source: https://github.com/1991513ccie-png/skills
- Extracted from upstream docs: https://raw.githubusercontent.com/tillson/git-hound/HEAD/README.md
Documentation
- https://github.com/1991513ccie-png/skills
