keyhog 0.5.40

keyhog: detects leaked credentials in source trees, git history, and cloud storage
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59

//! KH-GAP-106: `backend --patterns` defaults to 1509 but the compiled scanner
//! reports ~5769 patterns in the progress banner — routing matrix lies on fresh installs.

use crate::e2e::support::binary;
use std::path::PathBuf;
use std::process::Command;

fn repo_root() -> PathBuf {
    let mut d = PathBuf::from(env!("CARGO_MANIFEST_DIR"));
    d.pop();
    d.pop();
    d
}

#[test]
fn backend_default_pattern_count_matches_compiled_scanner_not_stale_1509() {
    let backend = Command::new(binary())
        .arg("backend")
        .output()
        .expect("spawn backend");
    assert_eq!(backend.status.code(), Some(0));
    let backend_out = String::from_utf8_lossy(&backend.stdout);
    assert!(
        !backend_out.contains("pattern_count = 1509"),
        "backend routing matrix must not use stale default 1509; out={backend_out}"
    );

    let repo = repo_root();
    let demo = repo.join("demo-secret.env");
    let progress = Command::new(binary())
        .args(["scan", demo.to_str().unwrap(), "--progress"])
        .current_dir(&repo)
        .output()
        .expect("spawn scan --progress");
    let stderr = String::from_utf8_lossy(&progress.stderr);
    let compiled = stderr
        .split('(')
        .find_map(|s| {
            s.strip_suffix(" patterns)")
                .or_else(|| s.split(')').next()?.strip_suffix(" patterns"))
        })
        .and_then(|n| n.split_whitespace().last()?.parse::<usize>().ok())
        .or_else(|| {
            stderr
                .split(" patterns)")
                .next()?
                .rsplit_once('(')
                .map(|(_, n)| n.trim().parse::<usize>().ok())?
        })
        .unwrap_or(0);
    assert!(
        compiled > 2000,
        "expected live compiled pattern count in progress banner; stderr={stderr}"
    );
    assert!(
        backend_out.contains(&format!("pattern_count = {compiled}")),
        "backend matrix must cite compiled pattern_count={compiled}; out={backend_out}"
    );
}