Paranoïd about having secrets leaked in your huge codebase? Entropy is here to help you find them!

Entropy

Entropy is a CLI tool that willscan your codebase for high entropy lines, which are often secrets.

Installation

From source with Go (preferred)

go install github.com/EwenQuim/entropy@latestentropy# More optionsentropy -hentropy -top 20 -ext go,py,jsentropy -top 5 -ignore-ext min.js,pdf,png,jpg,jpeg,zip,mp4,gif my-folder my-file1 my-file2

or in one line

go run github.com/EwenQuim/entropy@latest

With brew

brew install ewenquim/repo/entropyentropy# More optionsentropy -hentropy -top 20 -ext go,py,jsentropy -top 5 -ignore-ext min.js,_test.go,pdf,png,jpg my-folder my-file1 my-file2

With docker

docker run --rm -v $(pwd):/data ewenquim/entropy /data# More optionsdocker run --rm -v $(pwd):/data ewenquim/entropy -hdocker run --rm -v $(pwd):/data ewenquim/entropy -top 20 -ext go,py,js /datadocker run --rm -v $(pwd):/data ewenquim/entropy -top 5 /data/my-folder /data/my-file

The docker image is available onDocker Hub.

The-v option is used to mount the current directory into the container. The/data directory is the default directory where the tool will look for files.Don't forget to add /data at the end of the command, otherwise the tool will search inside the container, not your local filesystem.

My other projects

• Fuego: A Go framework that generates OpenAPI documentation from your codebase.
• Renpy-Graphviz: A tool to generate a graph of the Ren'Py game engine's screens and labels.

There is no documentation for this package.