oxsecurity
Consider adding Kingfisher support
https://github.com/mongodb/kingfisher?tab=readme-ov-file#installation
A secret scanner and validator with lots of rules out of the box made by MongoDB.
@Pinguladora Looks interesting, thanks for the suggestion ! :)
Does it have additional features than Gitleaks, secretlint or trufflehog ?
Hi @nvuillam - I actually built Kingfisher. It's main features are:
- extremely fast. Written in Rust and uses the SIMD accelerated Hyperscan regex engine. Often an order of magnitude faster than comparable tools
- comes with hundreds of built-in rules, many which are not found in other open-source tools. Also supports easily adding custom rules via a simple yaml format.
- performs live-validation of secrets, by default (like trufflehog)
- supports many targets (files, git repos + history, gitlab, github, gitea, bitbucket, azure devops, slack, confluence, jira, docker images)
- supports a "baseline" file to prevent new secrets from getting in, while not alerting on known secrets
- apache 2.0 open-source with no commercial components
This issue has been automatically marked as stale because it has not had recent activity. It will be closed in 14 days if no further activity occurs. Thank you for your contributions.
If you think this issue should stay open, please remove the O: stale 🤖 label or comment on the issue.
![github-actions[bot] avatar](https://avatars.githubusercontent.com/in/15368?v=4 "Published by a pub.dev verified publisher"){kind=small}
@mickgmdb thanks for the description, it looks great :)
Does it hides the found tokens by default ?
@Pinguladora > if you can make sure that found secrets won't appear in logs, you have my go to submit a pull request within Megaliner to add it :)
@nvuillam, by default it will show the tokens. If you pass --redact when running Kingfisher, it replaces discovered secrets with a one-way hash for secure output.
example: kingfisher scan /path/to/dir/or/repo --redact
This issue has been automatically marked as stale because it has not had recent activity. It will be closed in 14 days if no further activity occurs. Thank you for your contributions.
If you think this issue should stay open, please remove the O: stale 🤖 label or comment on the issue.