trufflehog icon indicating copy to clipboard operation
trufflehog copied to clipboard

Add OpenVSX detector

Open Kiblyn11 opened this issue 5 months ago • 3 comments

Description:

Add a detector for OpenVSX tokens used by OpenVSX registry: https://open-vsx.org/ It use an available API endpoint on a legitimate namespace and look for permission issue error which means the token exist and is valid.

Checklist:

  • [x] Tests passing (make test-community)?
  • [x] Lint passing (make lint this requires golangci-lint)?

Kiblyn11 avatar Jun 17 '25 20:06 Kiblyn11

CLA assistant check
All committers have signed the CLA.

CLAassistant avatar Jun 17 '25 20:06 CLAassistant

@Kiblyn11 Thanks for your contribution! I’ve done an initial review; great work so far. I’ve left some feedback for minor improvements. I’ll do a thorough review once the updates are in.

shahzadhaider1 avatar Jun 18 '25 05:06 shahzadhaider1

@shahzadhaider1 Thanks for your initial review. I have to admit I hacked this at first to check some assumptions without looking at contributing guides. I updated the detector type to be specific.

Kiblyn11 avatar Jun 18 '25 07:06 Kiblyn11