diff options
author | CoprDistGit <infra@openeuler.org> | 2023-05-05 09:00:37 +0000 |
---|---|---|
committer | CoprDistGit <infra@openeuler.org> | 2023-05-05 09:00:37 +0000 |
commit | 94325f43839816dbf97bcd4dba32e7263203fbd9 (patch) | |
tree | 0a54a8ec695d8d9097ba4fbfbafb89957ff5eefb | |
parent | c17b7544df819c82f5a9e7cb8e5e712207f6e112 (diff) |
automatic import of python-trufflehog3openeuler20.03
-rw-r--r-- | .gitignore | 1 | ||||
-rw-r--r-- | python-trufflehog3.spec | 337 | ||||
-rw-r--r-- | sources | 1 |
3 files changed, 339 insertions, 0 deletions
@@ -0,0 +1 @@ +/trufflehog3-3.0.6.tar.gz diff --git a/python-trufflehog3.spec b/python-trufflehog3.spec new file mode 100644 index 0000000..75a0a12 --- /dev/null +++ b/python-trufflehog3.spec @@ -0,0 +1,337 @@ +%global _empty_manifest_terminate_build 0 +Name: python-trufflehog3 +Version: 3.0.6 +Release: 1 +Summary: Find secrets in your codebase +License: GNU +URL: https://github.com/feeltheajf/trufflehog3 +Source0: https://mirrors.nju.edu.cn/pypi/web/packages/25/d9/f32c51cd7042410aeaeb888dec12294b8f94d27b70f83e3c97a132b33444/trufflehog3-3.0.6.tar.gz +BuildArch: noarch + +Requires: python3-attrs +Requires: python3-GitPython +Requires: python3-Jinja2 +Requires: python3-PyYAML + +%description +[](https://pypi.org/project/trufflehog3) + +[](https://pepy.tech/project/trufflehog3) +[](https://github.com/feeltheajf/trufflehog3/actions/workflows/tests.yml) +[](https://codecov.io/gh/feeltheajf/trufflehog3) + +# trufflehog3 + +This is an enhanced version of the [truffleHog](https://github.com/dxa4481/truffleHog) scanner + +<p align="middle"> + <a href="https://feeltheajf.github.io/trufflehog3/examples/report" target="_blank"> + <img src="https://feeltheajf.github.io/trufflehog3/examples/preview_desktop.png" alt="report preview dekstop" width="80%" /> + <img src="https://feeltheajf.github.io/trufflehog3/examples/preview_mobile.png" alt="report preview mobile" width="19%" /> + </a> +</p> + +## Installation + +Package is available on [PyPI](https://pypi.org/project/trufflehog3) + +``` +pip install trufflehog3 +``` + +## Usage + +Full API documentation is available at <a href="https://feeltheajf.github.io/trufflehog3/" target="_blank">feeltheajf.github.io/trufflehog3</a>. + +You can always check available options by running + +``` +trufflehog3 --help +``` + +Here are some basic examples to get you started + +```bash +# clone remote Git repository, scan 10 latest commits and output to stdout +$ trufflehog3 --max-depth 10 https://github.com/feeltheajf/trufflehog3 + +# disable Git history search, scan current directory and save report as JSON +$ trufflehog3 --no-history --format json --output report.json + +# render HTML report from JSON +$ trufflehog3 -R report.json --output report.html +``` + +## New + +v3 was heavily updated both under the hood and from API perspective. See below for more details on new features. + +### Automatic Config Detection + +`.trufflehog3.yml` is automatically detected in the root of the scanned directory. However, you can still specify custom path using `-c/--config` CLI argument. Do not forget to check out the updated [.trufflehog3.yml](.trufflehog3.yml) config file format. + +### HTML Reports + +HTML reports are now much prettier and more useful than ever. You can filter out specific rules or paths on the fly without fiddling with raw data. Have a look at a sample <a href="https://feeltheajf.github.io/trufflehog3/examples/report" target="_blank">HTML report</a> and try it on your own. + +### Inline Exclude + +Inline `nosecret` comments are now supported for excluding false positives + +```python +# skip all rules +password = "" # nosecret + +# only skip rule with specific id +password = "" # nosecret: generic.password +``` + +If for some reason you would like to avoid such behavior, there is a new `--ignore-nosecret` CLI flag which will tell trufflehog3 to ignore all inline comments. + +### Incremental Scan + +You can now run an incremental scan by specifying the path to the baseline JSON report as `-i/--incremental` CLI argument. In this case, only the new issues compared to the baseline will be reported. + +### Multiprocessing + +Multiprocessing support allows for much faster scans. You can alter the number of processes using `-p/--processes` CLI argument. + +## Thanks + +Special thanks to Dylan Ayrey ([@dxa4481](https://github.com/dxa4481)), developer of the original [truffleHog](https://github.com/dxa4481/truffleHog) scanner + + + + +%package -n python3-trufflehog3 +Summary: Find secrets in your codebase +Provides: python-trufflehog3 +BuildRequires: python3-devel +BuildRequires: python3-setuptools +BuildRequires: python3-pip +%description -n python3-trufflehog3 +[](https://pypi.org/project/trufflehog3) + +[](https://pepy.tech/project/trufflehog3) +[](https://github.com/feeltheajf/trufflehog3/actions/workflows/tests.yml) +[](https://codecov.io/gh/feeltheajf/trufflehog3) + +# trufflehog3 + +This is an enhanced version of the [truffleHog](https://github.com/dxa4481/truffleHog) scanner + +<p align="middle"> + <a href="https://feeltheajf.github.io/trufflehog3/examples/report" target="_blank"> + <img src="https://feeltheajf.github.io/trufflehog3/examples/preview_desktop.png" alt="report preview dekstop" width="80%" /> + <img src="https://feeltheajf.github.io/trufflehog3/examples/preview_mobile.png" alt="report preview mobile" width="19%" /> + </a> +</p> + +## Installation + +Package is available on [PyPI](https://pypi.org/project/trufflehog3) + +``` +pip install trufflehog3 +``` + +## Usage + +Full API documentation is available at <a href="https://feeltheajf.github.io/trufflehog3/" target="_blank">feeltheajf.github.io/trufflehog3</a>. + +You can always check available options by running + +``` +trufflehog3 --help +``` + +Here are some basic examples to get you started + +```bash +# clone remote Git repository, scan 10 latest commits and output to stdout +$ trufflehog3 --max-depth 10 https://github.com/feeltheajf/trufflehog3 + +# disable Git history search, scan current directory and save report as JSON +$ trufflehog3 --no-history --format json --output report.json + +# render HTML report from JSON +$ trufflehog3 -R report.json --output report.html +``` + +## New + +v3 was heavily updated both under the hood and from API perspective. See below for more details on new features. + +### Automatic Config Detection + +`.trufflehog3.yml` is automatically detected in the root of the scanned directory. However, you can still specify custom path using `-c/--config` CLI argument. Do not forget to check out the updated [.trufflehog3.yml](.trufflehog3.yml) config file format. + +### HTML Reports + +HTML reports are now much prettier and more useful than ever. You can filter out specific rules or paths on the fly without fiddling with raw data. Have a look at a sample <a href="https://feeltheajf.github.io/trufflehog3/examples/report" target="_blank">HTML report</a> and try it on your own. + +### Inline Exclude + +Inline `nosecret` comments are now supported for excluding false positives + +```python +# skip all rules +password = "" # nosecret + +# only skip rule with specific id +password = "" # nosecret: generic.password +``` + +If for some reason you would like to avoid such behavior, there is a new `--ignore-nosecret` CLI flag which will tell trufflehog3 to ignore all inline comments. + +### Incremental Scan + +You can now run an incremental scan by specifying the path to the baseline JSON report as `-i/--incremental` CLI argument. In this case, only the new issues compared to the baseline will be reported. + +### Multiprocessing + +Multiprocessing support allows for much faster scans. You can alter the number of processes using `-p/--processes` CLI argument. + +## Thanks + +Special thanks to Dylan Ayrey ([@dxa4481](https://github.com/dxa4481)), developer of the original [truffleHog](https://github.com/dxa4481/truffleHog) scanner + + + + +%package help +Summary: Development documents and examples for trufflehog3 +Provides: python3-trufflehog3-doc +%description help +[](https://pypi.org/project/trufflehog3) + +[](https://pepy.tech/project/trufflehog3) +[](https://github.com/feeltheajf/trufflehog3/actions/workflows/tests.yml) +[](https://codecov.io/gh/feeltheajf/trufflehog3) + +# trufflehog3 + +This is an enhanced version of the [truffleHog](https://github.com/dxa4481/truffleHog) scanner + +<p align="middle"> + <a href="https://feeltheajf.github.io/trufflehog3/examples/report" target="_blank"> + <img src="https://feeltheajf.github.io/trufflehog3/examples/preview_desktop.png" alt="report preview dekstop" width="80%" /> + <img src="https://feeltheajf.github.io/trufflehog3/examples/preview_mobile.png" alt="report preview mobile" width="19%" /> + </a> +</p> + +## Installation + +Package is available on [PyPI](https://pypi.org/project/trufflehog3) + +``` +pip install trufflehog3 +``` + +## Usage + +Full API documentation is available at <a href="https://feeltheajf.github.io/trufflehog3/" target="_blank">feeltheajf.github.io/trufflehog3</a>. + +You can always check available options by running + +``` +trufflehog3 --help +``` + +Here are some basic examples to get you started + +```bash +# clone remote Git repository, scan 10 latest commits and output to stdout +$ trufflehog3 --max-depth 10 https://github.com/feeltheajf/trufflehog3 + +# disable Git history search, scan current directory and save report as JSON +$ trufflehog3 --no-history --format json --output report.json + +# render HTML report from JSON +$ trufflehog3 -R report.json --output report.html +``` + +## New + +v3 was heavily updated both under the hood and from API perspective. See below for more details on new features. + +### Automatic Config Detection + +`.trufflehog3.yml` is automatically detected in the root of the scanned directory. However, you can still specify custom path using `-c/--config` CLI argument. Do not forget to check out the updated [.trufflehog3.yml](.trufflehog3.yml) config file format. + +### HTML Reports + +HTML reports are now much prettier and more useful than ever. You can filter out specific rules or paths on the fly without fiddling with raw data. Have a look at a sample <a href="https://feeltheajf.github.io/trufflehog3/examples/report" target="_blank">HTML report</a> and try it on your own. + +### Inline Exclude + +Inline `nosecret` comments are now supported for excluding false positives + +```python +# skip all rules +password = "" # nosecret + +# only skip rule with specific id +password = "" # nosecret: generic.password +``` + +If for some reason you would like to avoid such behavior, there is a new `--ignore-nosecret` CLI flag which will tell trufflehog3 to ignore all inline comments. + +### Incremental Scan + +You can now run an incremental scan by specifying the path to the baseline JSON report as `-i/--incremental` CLI argument. In this case, only the new issues compared to the baseline will be reported. + +### Multiprocessing + +Multiprocessing support allows for much faster scans. You can alter the number of processes using `-p/--processes` CLI argument. + +## Thanks + +Special thanks to Dylan Ayrey ([@dxa4481](https://github.com/dxa4481)), developer of the original [truffleHog](https://github.com/dxa4481/truffleHog) scanner + + + + +%prep +%autosetup -n trufflehog3-3.0.6 + +%build +%py3_build + +%install +%py3_install +install -d -m755 %{buildroot}/%{_pkgdocdir} +if [ -d doc ]; then cp -arf doc %{buildroot}/%{_pkgdocdir}; fi +if [ -d docs ]; then cp -arf docs %{buildroot}/%{_pkgdocdir}; fi +if [ -d example ]; then cp -arf example %{buildroot}/%{_pkgdocdir}; fi +if [ -d examples ]; then cp -arf examples %{buildroot}/%{_pkgdocdir}; fi +pushd %{buildroot} +if [ -d usr/lib ]; then + find usr/lib -type f -printf "/%h/%f\n" >> filelist.lst +fi +if [ -d usr/lib64 ]; then + find usr/lib64 -type f -printf "/%h/%f\n" >> filelist.lst +fi +if [ -d usr/bin ]; then + find usr/bin -type f -printf "/%h/%f\n" >> filelist.lst +fi +if [ -d usr/sbin ]; then + find usr/sbin -type f -printf "/%h/%f\n" >> filelist.lst +fi +touch doclist.lst +if [ -d usr/share/man ]; then + find usr/share/man -type f -printf "/%h/%f.gz\n" >> doclist.lst +fi +popd +mv %{buildroot}/filelist.lst . +mv %{buildroot}/doclist.lst . + +%files -n python3-trufflehog3 -f filelist.lst +%dir %{python3_sitelib}/* + +%files help -f doclist.lst +%{_docdir}/* + +%changelog +* Fri May 05 2023 Python_Bot <Python_Bot@openeuler.org> - 3.0.6-1 +- Package Spec generated @@ -0,0 +1 @@ +9ec2ac726661ca7c6d8d6995125a979e trufflehog3-3.0.6.tar.gz |