ace-git-secrets 0.13.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (49) hide show
  1. checksums.yaml +7 -0
  2. data/.ace-defaults/git-secrets/config.yml +63 -0
  3. data/.ace-defaults/git-secrets/gitleaks.toml +14 -0
  4. data/.ace-defaults/nav/protocols/guide-sources/ace-git-secrets.yml +10 -0
  5. data/.ace-defaults/nav/protocols/wfi-sources/ace-git-secrets.yml +19 -0
  6. data/CHANGELOG.md +298 -0
  7. data/LICENSE +21 -0
  8. data/README.md +40 -0
  9. data/Rakefile +16 -0
  10. data/docs/demo/ace-git-secrets-getting-started.gif +0 -0
  11. data/docs/demo/ace-git-secrets-getting-started.tape.yml +38 -0
  12. data/docs/demo/fixtures/README.md +3 -0
  13. data/docs/demo/fixtures/sample.txt +1 -0
  14. data/docs/getting-started.md +109 -0
  15. data/docs/handbook.md +43 -0
  16. data/docs/usage.md +301 -0
  17. data/exe/ace-git-secrets +19 -0
  18. data/handbook/agents/security-audit.ag.md +237 -0
  19. data/handbook/guides/security/ruby.md +27 -0
  20. data/handbook/guides/security/rust.md +51 -0
  21. data/handbook/guides/security/typescript.md +33 -0
  22. data/handbook/guides/security.g.md +155 -0
  23. data/handbook/skills/as-git-security-audit/SKILL.md +29 -0
  24. data/handbook/skills/as-git-token-remediation/SKILL.md +21 -0
  25. data/handbook/workflow-instructions/git/security-audit.wf.md +247 -0
  26. data/handbook/workflow-instructions/git/token-remediation.wf.md +294 -0
  27. data/lib/ace/git/secrets/atoms/gitleaks_runner.rb +244 -0
  28. data/lib/ace/git/secrets/atoms/service_api_client.rb +188 -0
  29. data/lib/ace/git/secrets/cli/commands/check_release.rb +41 -0
  30. data/lib/ace/git/secrets/cli/commands/revoke.rb +44 -0
  31. data/lib/ace/git/secrets/cli/commands/rewrite.rb +46 -0
  32. data/lib/ace/git/secrets/cli/commands/scan.rb +51 -0
  33. data/lib/ace/git/secrets/cli.rb +75 -0
  34. data/lib/ace/git/secrets/commands/check_release_command.rb +48 -0
  35. data/lib/ace/git/secrets/commands/revoke_command.rb +199 -0
  36. data/lib/ace/git/secrets/commands/rewrite_command.rb +147 -0
  37. data/lib/ace/git/secrets/commands/scan_command.rb +113 -0
  38. data/lib/ace/git/secrets/models/detected_token.rb +129 -0
  39. data/lib/ace/git/secrets/models/revocation_result.rb +119 -0
  40. data/lib/ace/git/secrets/models/scan_report.rb +402 -0
  41. data/lib/ace/git/secrets/molecules/git_rewriter.rb +199 -0
  42. data/lib/ace/git/secrets/molecules/history_scanner.rb +155 -0
  43. data/lib/ace/git/secrets/molecules/token_revoker.rb +100 -0
  44. data/lib/ace/git/secrets/organisms/history_cleaner.rb +201 -0
  45. data/lib/ace/git/secrets/organisms/release_gate.rb +133 -0
  46. data/lib/ace/git/secrets/organisms/security_auditor.rb +220 -0
  47. data/lib/ace/git/secrets/version.rb +9 -0
  48. data/lib/ace/git/secrets.rb +168 -0
  49. metadata +227 -0
metadata ADDED
@@ -0,0 +1,227 @@
1
+ --- !ruby/object:Gem::Specification
2
+ name: ace-git-secrets
3
+ version: !ruby/object:Gem::Version
4
+ version: 0.13.0
5
+ platform: ruby
6
+ authors:
7
+ - Michal Czyz
8
+ bindir: exe
9
+ cert_chain: []
10
+ date: 1980-01-02 00:00:00.000000000 Z
11
+ dependencies:
12
+ - !ruby/object:Gem::Dependency
13
+ name: ace-support-config
14
+ requirement: !ruby/object:Gem::Requirement
15
+ requirements:
16
+ - - "~>"
17
+ - !ruby/object:Gem::Version
18
+ version: '0.8'
19
+ type: :runtime
20
+ prerelease: false
21
+ version_requirements: !ruby/object:Gem::Requirement
22
+ requirements:
23
+ - - "~>"
24
+ - !ruby/object:Gem::Version
25
+ version: '0.8'
26
+ - !ruby/object:Gem::Dependency
27
+ name: ace-b36ts
28
+ requirement: !ruby/object:Gem::Requirement
29
+ requirements:
30
+ - - "~>"
31
+ - !ruby/object:Gem::Version
32
+ version: '0.7'
33
+ type: :runtime
34
+ prerelease: false
35
+ version_requirements: !ruby/object:Gem::Requirement
36
+ requirements:
37
+ - - "~>"
38
+ - !ruby/object:Gem::Version
39
+ version: '0.7'
40
+ - !ruby/object:Gem::Dependency
41
+ name: ace-support-core
42
+ requirement: !ruby/object:Gem::Requirement
43
+ requirements:
44
+ - - "~>"
45
+ - !ruby/object:Gem::Version
46
+ version: '0.25'
47
+ type: :runtime
48
+ prerelease: false
49
+ version_requirements: !ruby/object:Gem::Requirement
50
+ requirements:
51
+ - - "~>"
52
+ - !ruby/object:Gem::Version
53
+ version: '0.25'
54
+ - !ruby/object:Gem::Dependency
55
+ name: ace-support-cli
56
+ requirement: !ruby/object:Gem::Requirement
57
+ requirements:
58
+ - - "~>"
59
+ - !ruby/object:Gem::Version
60
+ version: '0.3'
61
+ type: :runtime
62
+ prerelease: false
63
+ version_requirements: !ruby/object:Gem::Requirement
64
+ requirements:
65
+ - - "~>"
66
+ - !ruby/object:Gem::Version
67
+ version: '0.3'
68
+ - !ruby/object:Gem::Dependency
69
+ name: faraday
70
+ requirement: !ruby/object:Gem::Requirement
71
+ requirements:
72
+ - - "~>"
73
+ - !ruby/object:Gem::Version
74
+ version: '2.7'
75
+ - - ">="
76
+ - !ruby/object:Gem::Version
77
+ version: 2.7.4
78
+ type: :runtime
79
+ prerelease: false
80
+ version_requirements: !ruby/object:Gem::Requirement
81
+ requirements:
82
+ - - "~>"
83
+ - !ruby/object:Gem::Version
84
+ version: '2.7'
85
+ - - ">="
86
+ - !ruby/object:Gem::Version
87
+ version: 2.7.4
88
+ - !ruby/object:Gem::Dependency
89
+ name: faraday-retry
90
+ requirement: !ruby/object:Gem::Requirement
91
+ requirements:
92
+ - - "~>"
93
+ - !ruby/object:Gem::Version
94
+ version: '2.2'
95
+ type: :runtime
96
+ prerelease: false
97
+ version_requirements: !ruby/object:Gem::Requirement
98
+ requirements:
99
+ - - "~>"
100
+ - !ruby/object:Gem::Version
101
+ version: '2.2'
102
+ - !ruby/object:Gem::Dependency
103
+ name: minitest
104
+ requirement: !ruby/object:Gem::Requirement
105
+ requirements:
106
+ - - "~>"
107
+ - !ruby/object:Gem::Version
108
+ version: '5.19'
109
+ type: :development
110
+ prerelease: false
111
+ version_requirements: !ruby/object:Gem::Requirement
112
+ requirements:
113
+ - - "~>"
114
+ - !ruby/object:Gem::Version
115
+ version: '5.19'
116
+ - !ruby/object:Gem::Dependency
117
+ name: rake
118
+ requirement: !ruby/object:Gem::Requirement
119
+ requirements:
120
+ - - "~>"
121
+ - !ruby/object:Gem::Version
122
+ version: '13.0'
123
+ type: :development
124
+ prerelease: false
125
+ version_requirements: !ruby/object:Gem::Requirement
126
+ requirements:
127
+ - - "~>"
128
+ - !ruby/object:Gem::Version
129
+ version: '13.0'
130
+ - !ruby/object:Gem::Dependency
131
+ name: webmock
132
+ requirement: !ruby/object:Gem::Requirement
133
+ requirements:
134
+ - - "~>"
135
+ - !ruby/object:Gem::Version
136
+ version: '3.19'
137
+ type: :development
138
+ prerelease: false
139
+ version_requirements: !ruby/object:Gem::Requirement
140
+ requirements:
141
+ - - "~>"
142
+ - !ruby/object:Gem::Version
143
+ version: '3.19'
144
+ description: |
145
+ ace-git-secrets scans Git history for leaked credentials with gitleaks-backed
146
+ detection, revokes supported tokens, rewrites compromised history, and blocks
147
+ releases when secrets are still present.
148
+ email:
149
+ - mc@cs3b.com
150
+ executables:
151
+ - ace-git-secrets
152
+ extensions: []
153
+ extra_rdoc_files: []
154
+ files:
155
+ - ".ace-defaults/git-secrets/config.yml"
156
+ - ".ace-defaults/git-secrets/gitleaks.toml"
157
+ - ".ace-defaults/nav/protocols/guide-sources/ace-git-secrets.yml"
158
+ - ".ace-defaults/nav/protocols/wfi-sources/ace-git-secrets.yml"
159
+ - CHANGELOG.md
160
+ - LICENSE
161
+ - README.md
162
+ - Rakefile
163
+ - docs/demo/ace-git-secrets-getting-started.gif
164
+ - docs/demo/ace-git-secrets-getting-started.tape.yml
165
+ - docs/demo/fixtures/README.md
166
+ - docs/demo/fixtures/sample.txt
167
+ - docs/getting-started.md
168
+ - docs/handbook.md
169
+ - docs/usage.md
170
+ - exe/ace-git-secrets
171
+ - handbook/agents/security-audit.ag.md
172
+ - handbook/guides/security.g.md
173
+ - handbook/guides/security/ruby.md
174
+ - handbook/guides/security/rust.md
175
+ - handbook/guides/security/typescript.md
176
+ - handbook/skills/as-git-security-audit/SKILL.md
177
+ - handbook/skills/as-git-token-remediation/SKILL.md
178
+ - handbook/workflow-instructions/git/security-audit.wf.md
179
+ - handbook/workflow-instructions/git/token-remediation.wf.md
180
+ - lib/ace/git/secrets.rb
181
+ - lib/ace/git/secrets/atoms/gitleaks_runner.rb
182
+ - lib/ace/git/secrets/atoms/service_api_client.rb
183
+ - lib/ace/git/secrets/cli.rb
184
+ - lib/ace/git/secrets/cli/commands/check_release.rb
185
+ - lib/ace/git/secrets/cli/commands/revoke.rb
186
+ - lib/ace/git/secrets/cli/commands/rewrite.rb
187
+ - lib/ace/git/secrets/cli/commands/scan.rb
188
+ - lib/ace/git/secrets/commands/check_release_command.rb
189
+ - lib/ace/git/secrets/commands/revoke_command.rb
190
+ - lib/ace/git/secrets/commands/rewrite_command.rb
191
+ - lib/ace/git/secrets/commands/scan_command.rb
192
+ - lib/ace/git/secrets/models/detected_token.rb
193
+ - lib/ace/git/secrets/models/revocation_result.rb
194
+ - lib/ace/git/secrets/models/scan_report.rb
195
+ - lib/ace/git/secrets/molecules/git_rewriter.rb
196
+ - lib/ace/git/secrets/molecules/history_scanner.rb
197
+ - lib/ace/git/secrets/molecules/token_revoker.rb
198
+ - lib/ace/git/secrets/organisms/history_cleaner.rb
199
+ - lib/ace/git/secrets/organisms/release_gate.rb
200
+ - lib/ace/git/secrets/organisms/security_auditor.rb
201
+ - lib/ace/git/secrets/version.rb
202
+ homepage: https://github.com/cs3b/ace
203
+ licenses:
204
+ - MIT
205
+ metadata:
206
+ homepage_uri: https://github.com/cs3b/ace
207
+ source_code_uri: https://github.com/cs3b/ace/tree/main/ace-git-secrets/
208
+ changelog_uri: https://github.com/cs3b/ace/blob/main/ace-git-secrets/CHANGELOG.md
209
+ rubygems_mfa_required: 'true'
210
+ rdoc_options: []
211
+ require_paths:
212
+ - lib
213
+ required_ruby_version: !ruby/object:Gem::Requirement
214
+ requirements:
215
+ - - ">="
216
+ - !ruby/object:Gem::Version
217
+ version: 3.2.0
218
+ required_rubygems_version: !ruby/object:Gem::Requirement
219
+ requirements:
220
+ - - ">="
221
+ - !ruby/object:Gem::Version
222
+ version: '0'
223
+ requirements: []
224
+ rubygems_version: 3.6.9
225
+ specification_version: 4
226
+ summary: Scan, revoke, and remove leaked credentials from Git history
227
+ test_files: []