@dotenvx/dotenvx 0.18.0 → 0.19.0

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.18.0",
+  "version": "0.19.0",
   "name": "@dotenvx/dotenvx",
   "description": "a better dotenv–from the creator of `dotenv`",
   "author": "@motdotla",

package/src/cli/actions/scan.js

@@ -0,0 +1,27 @@
+const execa = require('execa')
+
+const logger = require('./../../shared/logger')
+
+async function scan () {
+  const options = this.opts()
+  logger.debug(`options: ${JSON.stringify(options)}`)
+
+  try {
+    await execa('gitleaks', ['version'])
+  } catch (error) {
+    logger.error('gitleaks command not found')
+    logger.help('? install gitleaks:      [brew install gitleaks]')
+    logger.help2('? other install options: [https://github.com/gitleaks/gitleaks]')
+    process.exit(1)
+  }
+
+  try {
+    const { stderr } = await execa('gitleaks', ['detect', '-v'])
+    logger.blank(stderr) // gitleaks sends output as stderr for strange reason
+  } catch (error) {
+    logger.error(error.message)
+    process.exit(1)
+  }
+}
+
+module.exports = scan

package/src/cli/dotenvx.js

@@ -97,6 +97,11 @@ program.command('genexample')
   .option('-f, --env-file <paths...>', 'path(s) to your env file(s)', '.env')
   .action(require('./actions/genexample'))
 
+// dotenvx scan
+program.command('scan')
+  .description('scan for leaked secrets')
+  .action(require('./actions/scan'))
+
 // dotenvx ls
 program.command('ls')
   .description('print all .env files in a tree structure')