@guardbee/mcp-secret-scanner 0.1.2 → 0.1.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +56 -0
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -84,6 +84,62 @@ Bu araç tarama sonuçlarında eşleşen değerleri **kısmen redakte eder** (`s
|
|
|
84
84
|
|
|
85
85
|
---
|
|
86
86
|
|
|
87
|
+
## CLI — CI/CD Entegrasyonu
|
|
88
|
+
|
|
89
|
+
MCP server moduna ek olarak doğrudan CLI olarak da kullanılabilir:
|
|
90
|
+
|
|
91
|
+
```bash
|
|
92
|
+
# Proje dizinini tara
|
|
93
|
+
npx @guardbee/mcp-secret-scanner scan ./my-project
|
|
94
|
+
|
|
95
|
+
# Tek dosya tara
|
|
96
|
+
npx @guardbee/mcp-secret-scanner scan .env
|
|
97
|
+
|
|
98
|
+
# Sadece critical/high'da başarısız ol
|
|
99
|
+
npx @guardbee/mcp-secret-scanner scan . --fail-on=high
|
|
100
|
+
|
|
101
|
+
# JSON çıktı (CI raporlama için)
|
|
102
|
+
npx @guardbee/mcp-secret-scanner scan . --format=json
|
|
103
|
+
```
|
|
104
|
+
|
|
105
|
+
**Exit kodları:** `0` = secret bulunamadı · `1` = secret bulundu · `2` = hata
|
|
106
|
+
|
|
107
|
+
### GitHub Actions
|
|
108
|
+
|
|
109
|
+
```yaml
|
|
110
|
+
name: Secret Scan
|
|
111
|
+
on: [push, pull_request]
|
|
112
|
+
|
|
113
|
+
jobs:
|
|
114
|
+
secret-scan:
|
|
115
|
+
runs-on: ubuntu-latest
|
|
116
|
+
steps:
|
|
117
|
+
- uses: actions/checkout@v4
|
|
118
|
+
- name: Scan for exposed secrets
|
|
119
|
+
run: npx @guardbee/mcp-secret-scanner scan . --fail-on=high
|
|
120
|
+
```
|
|
121
|
+
|
|
122
|
+
### GitLab CI
|
|
123
|
+
|
|
124
|
+
```yaml
|
|
125
|
+
secret-scan:
|
|
126
|
+
image: node:20
|
|
127
|
+
script:
|
|
128
|
+
- npx @guardbee/mcp-secret-scanner scan . --fail-on=high
|
|
129
|
+
only:
|
|
130
|
+
- merge_requests
|
|
131
|
+
- main
|
|
132
|
+
```
|
|
133
|
+
|
|
134
|
+
### Pre-commit Hook
|
|
135
|
+
|
|
136
|
+
```bash
|
|
137
|
+
# .git/hooks/pre-commit
|
|
138
|
+
npx @guardbee/mcp-secret-scanner scan . --fail-on=critical || exit 1
|
|
139
|
+
```
|
|
140
|
+
|
|
141
|
+
---
|
|
142
|
+
|
|
87
143
|
## Geliştirme
|
|
88
144
|
|
|
89
145
|
```bash
|