Mirrors/trufflehog
2
0
Fork 0
mirror of https://github.com/trufflesecurity/trufflehog.git synced 2024-11-10 15:14:38 +00:00
Code Issues Projects Releases Packages Wiki Activity

Separate out printing statements with anlayzer logic for SourceGraph (#3119)

Browse source 
* Separated printing and analyzes functionality for sourcegraph

* remove second call to fetch userinfo in sourcegraph.
This commit is contained in:
Abdul Basit 2024-07-31 22:08:42 +05:00 committed by GitHub
parent b4b4ebaa03
commit 6fccac7f3d
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 40 additions and 26 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

64
pkg/analyzer/analyzers/sourcegraph/sourcegraph.go
View file

@ -4,6 +4,7 @@ package sourcegraph
import (
"encoding/json"
"fmt"
"net/http"
"strings"
@ -33,6 +34,11 @@ type UserInfoJSON struct {
} `json:"data"`
}
type SecretInfo struct {
User UserInfoJSON
IsSiteAdmin bool
}
func getUserInfo(cfg *config.Config, key string) (UserInfoJSON, error) {
var userInfo UserInfoJSON
@ -98,42 +104,50 @@ func checkSiteAdmin(cfg *config.Config, key string) (bool, error) {
return true, nil
}
func AnalyzePermissions(cfg *config.Config, key string) {
func AnalyzeAndPrintPermissions(cfg *config.Config, key string) {
// ToDo: Add in logging
if cfg.LoggingEnabled {
color.Red("[x] Logging is not supported for this analyzer.")
return
}
userInfo, err := getUserInfo(cfg, key)
info, err := AnalyzePermissions(cfg, key)
if err != nil {
color.Red("Error: %s", err)
color.Red("[x] Error: %s", err.Error())
return
}
// second call
userInfo, err = getUserInfo(cfg, key)
if err != nil {
color.Red("Error: %s", err)
return
}
if userInfo.Data.CurrentUser.Username == "" {
color.Red("[x] Invalid Sourcegraph Access Token")
return
}
color.Green("[!] Valid Sourcegraph Access Token\n\n")
color.Yellow("[i] Sourcegraph User Information\n")
color.Green("Username: %s\n", userInfo.Data.CurrentUser.Username)
color.Green("Email: %s\n", userInfo.Data.CurrentUser.Email)
color.Green("Created At: %s\n\n", userInfo.Data.CurrentUser.CreatedAt)
color.Green("Username: %s\n", info.User.Data.CurrentUser.Username)
color.Green("Email: %s\n", info.User.Data.CurrentUser.Email)
color.Green("Created At: %s\n\n", info.User.Data.CurrentUser.CreatedAt)
isSiteAdmin, err := checkSiteAdmin(cfg, key)
if err != nil {
color.Red("Error: %s", err)
return
}
if isSiteAdmin {
if info.IsSiteAdmin {
color.Green("[!] Token Permissions: Site Admin")
} else {
// This is the default for all access tokens as of 6/11/24
color.Yellow("[i] Token Permissions: user:full (default)")
}
}
func AnalyzePermissions(cfg *config.Config, key string) (*SecretInfo, error) {
userInfo, err := getUserInfo(cfg, key)
if err != nil {
return nil, err
}
if userInfo.Data.CurrentUser.Username == "" {
return nil, fmt.Errorf("invalid Sourcegraph Access Token")
}
isSiteAdmin, err := checkSiteAdmin(cfg, key)
if err != nil {
return nil, err
}
return &SecretInfo{
User: userInfo,
IsSiteAdmin: isSiteAdmin,
}, nil
}

2
pkg/analyzer/cli.go
View file

@ -239,7 +239,7 @@ func Run(cmd string) {
square.AnalyzeAndPrintPermissions(cfg, *squareKey)
case sourcegraphScan.FullCommand():
cfg.LogFile = analyzers.CreateLogFileName("sourcegraph")
sourcegraph.AnalyzePermissions(cfg, *sourcegraphKey)
sourcegraph.AnalyzeAndPrintPermissions(cfg, *sourcegraphKey)
case shopifyScan.FullCommand():
cfg.LogFile = analyzers.CreateLogFileName("shopify")
shopify.AnalyzeAndPrintPermissions(cfg, *shopifyKey, *shopifyStoreURL)