keyhog 0.5.73

GPU-accelerated secret scanner for code, Git history, cloud, containers, browser assets, and live credential verification
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69

//! Contract: `--format csv` emits documented header fields.

use crate::support::{binary, write_temp_file};
use std::process::Command;

#[test]
fn scan_format_csv_header_fields() {
    let (_dir, path) = write_temp_file("clean.txt", "no secrets here\n");
    let output = Command::new(binary())
        .args([
            "scan",
            "--daemon=off",
            "--backend",
            "simd",
            "--format",
            "csv",
        ])
        .arg(&path)
        .output()
        .expect("spawn");
    assert_eq!(
        output.status.code(),
        Some(0),
        "clean scan with csv format must exit 0"
    );
    let stdout = String::from_utf8_lossy(&output.stdout);
    let header = stdout
        .lines()
        .find(|line| !line.starts_with("# keyhog.scan.metadata="))
        .expect("csv must have at least a header");

    // Verify exact field names as documented in CsvReporter::new()
    let expected_fields = [
        "detector_id",
        "detector_name",
        "service",
        "severity",
        "credential_redacted",
        "credential_hash",
        "companions_redacted",
        "source",
        "file_path",
        "line",
        "offset",
        "commit",
        "author",
        "date",
        "verification",
        "confidence",
        "entropy",
        "remediation",
        "metadata",
        "additional_locations",
    ];

    for field in &expected_fields {
        assert!(
            header.contains(field),
            "csv header must contain field '{field}'; got: {header}"
        );
    }

    // Verify field order by checking the exact header line
    assert_eq!(
        header.trim(),
        "detector_id,detector_name,service,severity,credential_redacted,credential_hash,companions_redacted,source,file_path,line,offset,commit,author,date,verification,confidence,entropy,remediation,metadata,additional_locations",
        "csv header must be exactly the documented field list in order"
    );
}