Entropy is a CLI tool that will scan your codebase for high entropy lines, which are often secrets.
953

Paranoïd about having secrets leaked in your huge codebase? Entropy is here to help you find them!
Entropy is a CLI tool that will scan your codebase for high entropy lines, which are often secrets.
go install github.com/EwenQuim/entropy@latest
entropy
# More options
entropy -h
entropy -top 20 -ext go,py,js
entropy -top 5 -ignore-ext min.js,pdf,png,jpg,jpeg,zip,mp4,gif my-folder my-file1 my-file2
or in one line
go run github.com/EwenQuim/entropy@latest
WIP
docker run --rm -v $(pwd):/data ewenquim/entropy /data
# More options
docker run --rm -v $(pwd):/data ewenquim/entropy -h
docker run --rm -v $(pwd):/data ewenquim/entropy -top 20 -ext go,py,js /data
docker run --rm -v $(pwd):/data ewenquim/entropy -top 5 /data/my-folder /data/my-file
The docker image is available on Docker Hub.
The -v option is used to mount the current directory into the container. The /data directory is the default directory where the tool will look for files. Don't forget to add /data at the end of the command, otherwise the tool will search inside the container, not your local filesystem.
Content type
Image
Digest
sha256:343be860b…
Size
674.3 kB
Last updated
about 2 years ago
docker pull ewenquim/entropy