Compare commits

...

2 Commits

Author SHA1 Message Date
joeleonjr ba75163d88 Update README.md 2023-09-22 14:25:39 -04:00
joeleonjr 1edefe4f73 Update README for GH Comments Scanning 2023-09-22 14:24:20 -04:00
+30 -6
View File
@@ -110,37 +110,61 @@ Expected output:
...
```
## 4: Scan an S3 bucket for verified keys
## 4: Scan a GitHub Repo's Issues and PR Comments
Command:
```bash
trufflehog github --repo https://github.com/trufflesecurity/test_keys --only-verified --issue-comments --pr-comments
```
Expected output:
```
...
2023-09-22T18:22:10Z info-0 trufflehog scanning github pull request comments {"repository": "https://github.com/trufflesecurity/test_keys.git"}
Found verified result 🐷🔑
Detector Type: AWS
Decoder Type: PLAIN
Raw result: AKIAQYLPMN5HLU6OP3FX
Line: 1
Link: https://github.com/trufflesecurity/test_keys/issues/3#issuecomment-1731842331
Repository: test_keys
Timestamp: 2023-09-22 18:06:26 +0000 UTC
...
```
## 5: Scan an S3 bucket for verified keys
```bash
trufflehog s3 --bucket=<bucket name> --only-verified
```
## 5: Scan S3 buckets using IAM Roles
## 6: Scan S3 buckets using IAM Roles
```bash
trufflehog s3 --role-arn=<iam role arn>
```
## 6: Scan a Github Repo using SSH authentication in docker
## 7: Scan a Github Repo using SSH authentication in docker
```bash
docker run --rm -v "$HOME/.ssh:/root/.ssh:ro" trufflesecurity/trufflehog:latest git ssh://github.com/trufflesecurity/test_keys
```
## 7: Scan individual files or directories
## 8: Scan individual files or directories
```bash
trufflehog filesystem path/to/file1.txt path/to/file2.txt path/to/dir
```
## 8: Scan GCS buckets for verified secrets.
## 9: Scan GCS buckets for verified secrets.
```bash
trufflehog gcs --project-id=<project-ID> --cloud-environment --only-verified
```
## 9: Scan a Docker image for verified secrets.
## 10: Scan a Docker image for verified secrets.
Use the `--image` flag multiple times to scan multiple images.