keyhog 0.5.42

keyhog detects leaked credentials in source trees, git history, archives, and remote sources
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65

# Tier-B catalog of privacy-safe source execution classes that autoroute may
# render by name. Unknown library-provided `ChunkMetadata.source_type` values
# remain identified only by digest so inspection can never persist or print an
# operator token, URL, path, or credential accidentally placed in that field.
#
# Keep this list bytewise sorted. Dynamic binary section and image metadata
# names are normalized to their stable execution class before hashing.

[source_classes]
classes = [
  "azure_blob",
  "benchmark",
  "binary:elf",
  "binary:ghidra:decompiled",
  "binary:ghidra:strings",
  "binary:macho",
  "binary:pe",
  "binary:strings",
  "bitbucket-workspace",
  "daemon-warmup",
  "diff-artifact",
  "docker",
  "doctor",
  "filesystem",
  "filesystem/archive",
  "filesystem/archive-binary",
  "filesystem/archive-binary/tex-orphaned",
  "filesystem/archive-binary/tex-referenced",
  "filesystem/archive-binary/tex-root",
  "filesystem/archive/android",
  "filesystem/archive/android-resource",
  "filesystem/archive/android-xml",
  "filesystem/archive/tex-comment/orphaned",
  "filesystem/archive/tex-comment/referenced",
  "filesystem/archive/tex-comment/root",
  "filesystem/archive/tex-orphaned",
  "filesystem/archive/tex-referenced",
  "filesystem/archive/tex-root",
  "filesystem/compressed",
  "filesystem/compressed-binary",
  "filesystem/image-metadata",
  "filesystem/pdf",
  "filesystem/windowed",
  "filesystem:binary-strings",
  "gcs",
  "git-diff",
  "git-history",
  "git-staged",
  "git/tag",
  "git/unreachable",
  "github-collaboration",
  "github-org",
  "gitlab-group",
  "s3",
  "slack",
  "static",
  "stdin",
  "watch-warmup",
  "web:js",
  "web:sourcemap",
  "web:sourcemap:raw",
  "web:wasm",
  "wire:har:request",
  "wire:har:response",
]