guardy 0.2.4

Fast, secure git hooks in Rust with secret scanning and protected file synchronization
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102

//! Binary file extensions with base + custom support
//!
//! Provides a global set of binary file extensions that is compiled once
//! and shared across all threads for O(1) lookup performance.

use std::{
    collections::HashSet,
    sync::{Arc, LazyLock},
};

use anyhow::Result;

/// Load custom binary extensions from configuration
fn load_custom_extensions() -> Result<Vec<String>> {
    // TODO: Implement loading from:
    // - ~/.config/guardy/binary_extensions.txt (one per line)
    // - Environment variable GUARDY_BINARY_EXTENSIONS (comma-separated)
    // - ScannerConfig custom extensions

    // For now, return empty
    Ok(Vec::new())
}

/// Global shared binary extensions - base + custom merged
pub static BINARY_EXTENSIONS: LazyLock<Arc<HashSet<String>>> = LazyLock::new(|| {
    let start = std::time::Instant::now();

    // Base extensions (comprehensive list from v2) - copied exactly from types.rs
    let base_extensions = vec![
        // Images
        "png", "jpg", "jpeg", "gif", "bmp", "ico", "webp", "tiff", "tif", "avif", "heic", "heif",
        "dng", "raw", "nef", "cr2", "arw", "orf", "rw2", "svg", // Documents
        "pdf", "doc", "docx", "xls", "xlsx", "ppt", "pptx", "odt", "ods", "odp", "indd",
        // Archives
        "zip", "tar", "gz", "bz2", "xz", "7z", "rar", "dmg", "iso", "ace", "cab", "lzh", "arj",
        "br", "zst", "lz4", "lzo", "lzma", "tgz", // Executables & Object Files
        "exe", "dll", "so", "dylib", "bin", "app", "deb", "rpm", "o", "obj", "lib", "a", "pdb",
        "exp", "ilk", // Audio/Video
        "mp3", "wav", "ogg", "flac", "aac", "mp4", "avi", "mkv", "mov", "wmv", "webm", "mp2",
        "m4a", "wma", "amr", // Fonts
        "ttf", "otf", "woff", "woff2", "eot",
        // Security/Crypto (keeping PEM for secret detection)
        "gpg", "pgp", "p12", "pfx", "der", "crt", "keystore", // Database & Data Files
        "db", "sqlite", "sqlite3", "mdb", "sst", "ldb", "wal", "snap", "dat", "sas7bdat",
        "sas7bcat", "rdb", // CAD & Design Files
        "dwg", "dxf", "skp", "3ds", "max", "blend", "fbx",
        // Compiler & Build Artifacts
        "gcno", "gcda", "gcov", "wasm", "webc", // Binary Data & Image Files
        "img", "dmg", "vhd", "vmdk", "qcow2", "raw", // Other binary formats
        "pyc", "pyo", "class", "jar", "war", "ear", "swf", "fla", "npy",
        // NX cache files
        "nxt", // Common DOS/Legacy executables
        "com", "bat", "cmd", // Specialized formats that are definitely binary
        "bas", "pic", "b", "mcw", "ind", "dsk", "z",
        // Test data and specialized formats that often cause UTF-8 issues
        "gdiff", "srt", "zeno", "cba", "parquet", "avro", "orc",
        // Additional problematic formats discovered in scans
        "pak", "rpak", "webc", "toast", "data", // ai
        "pt",   // other
        "crl", "ptx", "sf", "jrprint", "sbt", "nepprj", "psf", "mac", "g3w", "hpi", "o5c", "cf1",
        "car", "vwx", "md8", "amg", "lb6", "nk2", "dwb", "skn", "signal", "jsa", "hlp", "kcw",
        "res", "cf2", "cwg", "vpk", "psbt", "sb",
        // Git and VCS files (large pack files, logs, etc.)
        "pack", "idx", "raftlog", "map", // Large binary formats causing memory issues
        "pth", "wasmu", "avif", "part",
    ];

    let mut all_extensions = HashSet::new();

    // Add base extensions
    for ext in base_extensions {
        all_extensions.insert(ext.to_string());
    }

    // Try to load and add custom extensions
    match load_custom_extensions() {
        Ok(custom) => {
            if !custom.is_empty() {
                tracing::info!("Loaded {} custom binary extensions", custom.len());
                for ext in custom {
                    all_extensions.insert(ext);
                }
            }
        }
        Err(e) => {
            tracing::warn!("Failed to load custom binary extensions: {}", e);
        }
    }

    tracing::debug!(
        "Binary extensions initialized with {} extensions in {:?}",
        all_extensions.len(),
        start.elapsed()
    );

    Arc::new(all_extensions)
});

/// Check if a file extension is binary
pub fn is_binary_extension(extension: &str) -> bool {
    BINARY_EXTENSIONS.contains(extension)
}