keyhunter 0.2.0

Check for leaked API keys and secrets on public websites
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51

const assert = require('assert')
const path = require('path')
const fs = require('fs')
const https = require('https')
const stream = require('stream')

const URL =
    'https://raw.githubusercontent.com/gitleaks/gitleaks/master/config/gitleaks.toml'
const OUTPATH = path.resolve(
    __dirname,
    '..',
    'src',
    'config',
    'gitleaks.toml'
)

downloadGitleaksTo(OUTPATH)
    .then(() => {
        console.log(`Downloaded gitleaks.toml to '${OUTPATH}'`)
    })
    .catch(e => {
        console.error(e)
        process.exit(1)
    })

/**
 * @param {string} outpath
 *
 * @returns {Promise<void>}
 */
function downloadGitleaksTo(outpath) {
    assert(
        outpath.endsWith('.toml'),
        'Git leads output file is not a TOML file'
    )

    return new Promise((resolve, reject) => {
        https.get(URL, response => {
            const { statusCode, statusMessage } = response

            if (statusCode != null && statusCode >= 300) {
                return reject(new Error(`${statusCode}: ${statusMessage}`))
            }

            stream.pipeline(response, fs.createWriteStream(outpath), err => {
                if (err) reject(err)
                else resolve()
            })
        })
    })
}