mirror of
https://github.com/trufflesecurity/trufflehog.git
synced 2024-11-10 07:04:24 +00:00
dbcb888063
The previous implementation used int64 for both, which can be mixed up easily. Using distinct types adds a layer of type safety checked by the compiler.
54 lines
1.5 KiB
Go
54 lines
1.5 KiB
Go
package engine
|
|
|
|
import (
|
|
"os"
|
|
|
|
"github.com/go-errors/errors"
|
|
"google.golang.org/protobuf/proto"
|
|
"google.golang.org/protobuf/types/known/anypb"
|
|
|
|
"github.com/trufflesecurity/trufflehog/v3/pkg/context"
|
|
"github.com/trufflesecurity/trufflehog/v3/pkg/pb/sourcespb"
|
|
"github.com/trufflesecurity/trufflehog/v3/pkg/sources"
|
|
"github.com/trufflesecurity/trufflehog/v3/pkg/sources/syslog"
|
|
)
|
|
|
|
// ScanSyslog is a source that scans syslog files.
|
|
func (e *Engine) ScanSyslog(ctx context.Context, c sources.SyslogConfig) error {
|
|
connection := &sourcespb.Syslog{
|
|
Protocol: c.Protocol,
|
|
ListenAddress: c.Address,
|
|
Format: c.Format,
|
|
}
|
|
|
|
if c.CertPath != "" && c.KeyPath != "" {
|
|
cert, err := os.ReadFile(c.CertPath)
|
|
if err != nil {
|
|
return errors.WrapPrefix(err, "could not open TLS cert file", 0)
|
|
}
|
|
connection.TlsCert = string(cert)
|
|
|
|
key, err := os.ReadFile(c.KeyPath)
|
|
if err != nil {
|
|
return errors.WrapPrefix(err, "could not open TLS key file", 0)
|
|
}
|
|
connection.TlsKey = string(key)
|
|
}
|
|
|
|
var conn anypb.Any
|
|
err := anypb.MarshalFrom(&conn, connection, proto.MarshalOptions{})
|
|
if err != nil {
|
|
return errors.WrapPrefix(err, "error unmarshalling connection", 0)
|
|
}
|
|
|
|
sourceName := "trufflehog - syslog"
|
|
sourceID, jobID, _ := e.sourceManager.GetIDs(ctx, sourceName, syslog.SourceType)
|
|
syslogSource := &syslog.Source{}
|
|
if err := syslogSource.Init(ctx, sourceName, jobID, sourceID, true, &conn, c.Concurrency); err != nil {
|
|
return err
|
|
}
|
|
syslogSource.InjectConnection(connection)
|
|
|
|
_, err = e.sourceManager.Run(ctx, sourceName, syslogSource)
|
|
return err
|
|
}
|