trufflehog icon indicating copy to clipboard operation
trufflehog copied to clipboard

Add scanning for user repos

Open uvulpos opened this issue 3 years ago • 4 comments

Community Note

  • Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
  • Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request
  • If you are interested in working on this issue or have submitted a pull request, please leave a comment

Description

As you already implemented the organization flag, as a private user, I want to check for my personal repos as well. The cherry on top would be even scanning private repositories, but this would be optional I guess 🙂

Problem to be Addressed

As you already implemented the organization flag, as a private user, I want to check for my personal repos as well. The cherry on top would be even scanning private repositories, but this would be optional I guess 🙂

Description of the Preferred Solution

An application-flag to define a user or to use a access token / ssh key

uvulpos avatar Dec 02 '22 15:12 uvulpos

You can specify github --org "<username>". Though, this doesn't satisfy your private repo request.

coffeepenbit avatar Jan 13 '23 12:01 coffeepenbit

Does that command still work? Debug trace on latest shows 404 on https://api.github.com/orgs/cameronlonsdale/repos?per_page=100 for my account for example. The URL seems to need to be https://api.github.com/users/cameronlonsdale/repos?per_page=100 with /users instead.

CameronLonsdale avatar May 07 '23 22:05 CameronLonsdale

You can specify github --org "". Though, this doesn't satisfy your private repo request.

Just tested this and it does not work. Opening this issue up for contributions. Should be relatively easy to implement

zricethezav avatar Aug 25 '23 21:08 zricethezav

Any updates on this? Or any workaround to solve this?

sherlocksecurity avatar May 09 '24 08:05 sherlocksecurity