Crate keyhog 

Modules

args

Command-line argument parsing for KeyHog.

baseline

Baseline scanning support for the KeyHog CLI.

benchmark

Built-in benchmark corpus and reporting for backend throughput checks.

config

Configuration file handling for the KeyHog CLI.

daemon

Daemon mode for keyhog: long-lived process that holds a compiled scanner and serves scan requests over a Unix socket.

format

Display formatting helpers shared between CLI subcommands.

inline_suppression

Inline suppression handling for CLI findings.

installer

Shared self-install / self-update primitives.

orchestrator

Core scanning orchestration logic for the KeyHog CLI.

orchestrator_config

path_validation

CLI path validation.

reporting

Report formatting and delivery for the KeyHog CLI.

sources

Source factory for the KeyHog CLI.

style

Terminal styling shared by the installer + diagnostic subcommands.

subcommands

Subcommand implementations for the KeyHog CLI.

test_fixture_suppressions

Tier-B test-fixture suppression list. Loaded from the bundled crates/cli/data/suppressions/test-fixtures.toml via include_str! at build time; previously hardcoded in orchestrator.rs as a chain of cred == concat!("sk_", "live_", …) branches. Moving the data out of code lets a user contribute a new suppression without re-compiling, lets the differential bench harness honour the same list, and lets users opt out entirely via --no-suppress-test-fixtures.

value_parsers

CLI value parsers for typed command-line options.

Statics

FINDINGS_COUNT

SCANNED_CHUNKS

SCANNER_PANICKED

Set to true if the scanner thread panicked during scan_sources. Read at the end of run() so a crashed scanner exits with a non-zero code instead of silently reporting “no findings, all clean” - that was the prior behavior and would mislead any caller piping keyhog into CI as a gate.

TOTAL_CHUNKS