%global _empty_manifest_terminate_build 0
Name: python-trufflehog3
Version: 3.0.6
Release: 1
Summary: Find secrets in your codebase
License: GNU
URL: https://github.com/feeltheajf/trufflehog3
Source0: https://mirrors.nju.edu.cn/pypi/web/packages/25/d9/f32c51cd7042410aeaeb888dec12294b8f94d27b70f83e3c97a132b33444/trufflehog3-3.0.6.tar.gz
BuildArch: noarch
Requires: python3-attrs
Requires: python3-GitPython
Requires: python3-Jinja2
Requires: python3-PyYAML
%description
[](https://pypi.org/project/trufflehog3)
[](https://pepy.tech/project/trufflehog3)
[](https://github.com/feeltheajf/trufflehog3/actions/workflows/tests.yml)
[](https://codecov.io/gh/feeltheajf/trufflehog3)
# trufflehog3
This is an enhanced version of the [truffleHog](https://github.com/dxa4481/truffleHog) scanner
## Installation
Package is available on [PyPI](https://pypi.org/project/trufflehog3)
```
pip install trufflehog3
```
## Usage
Full API documentation is available at feeltheajf.github.io/trufflehog3.
You can always check available options by running
```
trufflehog3 --help
```
Here are some basic examples to get you started
```bash
# clone remote Git repository, scan 10 latest commits and output to stdout
$ trufflehog3 --max-depth 10 https://github.com/feeltheajf/trufflehog3
# disable Git history search, scan current directory and save report as JSON
$ trufflehog3 --no-history --format json --output report.json
# render HTML report from JSON
$ trufflehog3 -R report.json --output report.html
```
## New
v3 was heavily updated both under the hood and from API perspective. See below for more details on new features.
### Automatic Config Detection
`.trufflehog3.yml` is automatically detected in the root of the scanned directory. However, you can still specify custom path using `-c/--config` CLI argument. Do not forget to check out the updated [.trufflehog3.yml](.trufflehog3.yml) config file format.
### HTML Reports
HTML reports are now much prettier and more useful than ever. You can filter out specific rules or paths on the fly without fiddling with raw data. Have a look at a sample HTML report and try it on your own.
### Inline Exclude
Inline `nosecret` comments are now supported for excluding false positives
```python
# skip all rules
password = "" # nosecret
# only skip rule with specific id
password = "" # nosecret: generic.password
```
If for some reason you would like to avoid such behavior, there is a new `--ignore-nosecret` CLI flag which will tell trufflehog3 to ignore all inline comments.
### Incremental Scan
You can now run an incremental scan by specifying the path to the baseline JSON report as `-i/--incremental` CLI argument. In this case, only the new issues compared to the baseline will be reported.
### Multiprocessing
Multiprocessing support allows for much faster scans. You can alter the number of processes using `-p/--processes` CLI argument.
## Thanks
Special thanks to Dylan Ayrey ([@dxa4481](https://github.com/dxa4481)), developer of the original [truffleHog](https://github.com/dxa4481/truffleHog) scanner
%package -n python3-trufflehog3
Summary: Find secrets in your codebase
Provides: python-trufflehog3
BuildRequires: python3-devel
BuildRequires: python3-setuptools
BuildRequires: python3-pip
%description -n python3-trufflehog3
[](https://pypi.org/project/trufflehog3)
[](https://pepy.tech/project/trufflehog3)
[](https://github.com/feeltheajf/trufflehog3/actions/workflows/tests.yml)
[](https://codecov.io/gh/feeltheajf/trufflehog3)
# trufflehog3
This is an enhanced version of the [truffleHog](https://github.com/dxa4481/truffleHog) scanner
## Installation
Package is available on [PyPI](https://pypi.org/project/trufflehog3)
```
pip install trufflehog3
```
## Usage
Full API documentation is available at feeltheajf.github.io/trufflehog3.
You can always check available options by running
```
trufflehog3 --help
```
Here are some basic examples to get you started
```bash
# clone remote Git repository, scan 10 latest commits and output to stdout
$ trufflehog3 --max-depth 10 https://github.com/feeltheajf/trufflehog3
# disable Git history search, scan current directory and save report as JSON
$ trufflehog3 --no-history --format json --output report.json
# render HTML report from JSON
$ trufflehog3 -R report.json --output report.html
```
## New
v3 was heavily updated both under the hood and from API perspective. See below for more details on new features.
### Automatic Config Detection
`.trufflehog3.yml` is automatically detected in the root of the scanned directory. However, you can still specify custom path using `-c/--config` CLI argument. Do not forget to check out the updated [.trufflehog3.yml](.trufflehog3.yml) config file format.
### HTML Reports
HTML reports are now much prettier and more useful than ever. You can filter out specific rules or paths on the fly without fiddling with raw data. Have a look at a sample HTML report and try it on your own.
### Inline Exclude
Inline `nosecret` comments are now supported for excluding false positives
```python
# skip all rules
password = "" # nosecret
# only skip rule with specific id
password = "" # nosecret: generic.password
```
If for some reason you would like to avoid such behavior, there is a new `--ignore-nosecret` CLI flag which will tell trufflehog3 to ignore all inline comments.
### Incremental Scan
You can now run an incremental scan by specifying the path to the baseline JSON report as `-i/--incremental` CLI argument. In this case, only the new issues compared to the baseline will be reported.
### Multiprocessing
Multiprocessing support allows for much faster scans. You can alter the number of processes using `-p/--processes` CLI argument.
## Thanks
Special thanks to Dylan Ayrey ([@dxa4481](https://github.com/dxa4481)), developer of the original [truffleHog](https://github.com/dxa4481/truffleHog) scanner
%package help
Summary: Development documents and examples for trufflehog3
Provides: python3-trufflehog3-doc
%description help
[](https://pypi.org/project/trufflehog3)
[](https://pepy.tech/project/trufflehog3)
[](https://github.com/feeltheajf/trufflehog3/actions/workflows/tests.yml)
[](https://codecov.io/gh/feeltheajf/trufflehog3)
# trufflehog3
This is an enhanced version of the [truffleHog](https://github.com/dxa4481/truffleHog) scanner
## Installation
Package is available on [PyPI](https://pypi.org/project/trufflehog3)
```
pip install trufflehog3
```
## Usage
Full API documentation is available at feeltheajf.github.io/trufflehog3.
You can always check available options by running
```
trufflehog3 --help
```
Here are some basic examples to get you started
```bash
# clone remote Git repository, scan 10 latest commits and output to stdout
$ trufflehog3 --max-depth 10 https://github.com/feeltheajf/trufflehog3
# disable Git history search, scan current directory and save report as JSON
$ trufflehog3 --no-history --format json --output report.json
# render HTML report from JSON
$ trufflehog3 -R report.json --output report.html
```
## New
v3 was heavily updated both under the hood and from API perspective. See below for more details on new features.
### Automatic Config Detection
`.trufflehog3.yml` is automatically detected in the root of the scanned directory. However, you can still specify custom path using `-c/--config` CLI argument. Do not forget to check out the updated [.trufflehog3.yml](.trufflehog3.yml) config file format.
### HTML Reports
HTML reports are now much prettier and more useful than ever. You can filter out specific rules or paths on the fly without fiddling with raw data. Have a look at a sample HTML report and try it on your own.
### Inline Exclude
Inline `nosecret` comments are now supported for excluding false positives
```python
# skip all rules
password = "" # nosecret
# only skip rule with specific id
password = "" # nosecret: generic.password
```
If for some reason you would like to avoid such behavior, there is a new `--ignore-nosecret` CLI flag which will tell trufflehog3 to ignore all inline comments.
### Incremental Scan
You can now run an incremental scan by specifying the path to the baseline JSON report as `-i/--incremental` CLI argument. In this case, only the new issues compared to the baseline will be reported.
### Multiprocessing
Multiprocessing support allows for much faster scans. You can alter the number of processes using `-p/--processes` CLI argument.
## Thanks
Special thanks to Dylan Ayrey ([@dxa4481](https://github.com/dxa4481)), developer of the original [truffleHog](https://github.com/dxa4481/truffleHog) scanner
%prep
%autosetup -n trufflehog3-3.0.6
%build
%py3_build
%install
%py3_install
install -d -m755 %{buildroot}/%{_pkgdocdir}
if [ -d doc ]; then cp -arf doc %{buildroot}/%{_pkgdocdir}; fi
if [ -d docs ]; then cp -arf docs %{buildroot}/%{_pkgdocdir}; fi
if [ -d example ]; then cp -arf example %{buildroot}/%{_pkgdocdir}; fi
if [ -d examples ]; then cp -arf examples %{buildroot}/%{_pkgdocdir}; fi
pushd %{buildroot}
if [ -d usr/lib ]; then
find usr/lib -type f -printf "/%h/%f\n" >> filelist.lst
fi
if [ -d usr/lib64 ]; then
find usr/lib64 -type f -printf "/%h/%f\n" >> filelist.lst
fi
if [ -d usr/bin ]; then
find usr/bin -type f -printf "/%h/%f\n" >> filelist.lst
fi
if [ -d usr/sbin ]; then
find usr/sbin -type f -printf "/%h/%f\n" >> filelist.lst
fi
touch doclist.lst
if [ -d usr/share/man ]; then
find usr/share/man -type f -printf "/%h/%f.gz\n" >> doclist.lst
fi
popd
mv %{buildroot}/filelist.lst .
mv %{buildroot}/doclist.lst .
%files -n python3-trufflehog3 -f filelist.lst
%dir %{python3_sitelib}/*
%files help -f doclist.lst
%{_docdir}/*
%changelog
* Fri May 05 2023 Python_Bot - 3.0.6-1
- Package Spec generated