gossan-scm 0.3.3

SCM Mapping (Source Control Mapping) for Gossan
docs.rs failed to build gossan-scm-0.3.3
Please check the build logs for more information.
See Builds for ideas on how to fix a failed build, or Metadata for how to configure docs.rs builds.
If you believe this is docs.rs' fault, open an issue.
Visit the last successful build: gossan-scm-0.3.2

gossan-scm

Source Control Mapping for Gossan, discovers GitHub / GitLab organizations and repositories tied to the seed domain, then mines them for secrets and internal-package references.

Discovery

  • WHOIS / DMARC / SPF parsing for git* references
  • GitHub org search via the user/code-search APIs (when a github_token is present in Config::api_keys)
  • GitLab group search

Mining

  • Repository tree walked for typical secret-bearing files (.env, id_rsa, *.pem, config.json, etc.)
  • package.json / requirements.txt / Cargo.toml / go.mod parsed for internal package names that shouldn't be exposed.

Note: This crate is currently excluded from the workspace because its keyhog dependencies trigger a cross-workspace workspace = true resolution issue. See GOSSAN_DEPTH.md Section B2 for the vendor-slice plan that re-includes it.

License

MIT