Skip to content
master
Switch branches/tags
Code

Latest commit

 

Git stats

Files

Permalink
Failed to load latest commit information.
Type
Name
Latest commit message
Commit time
 
 
 
 

TravisLeaks 🚀

A tool to find sensitive keys and passwords in Travis logs

travis gif


Description

Read the Blog post here

Just enter the Travis user name of the organization. The script will automatically find out all jobs and then do two things:

  1. Look for ED's keywords for potential leaks
  2. Use the concept of entropy to find potential API keys in the logs

Requirements (using travisleak.py script)

Python 3.X
pip install -r requirements.txt

Optional: Github Token for scanning GitHub Org's members

export GITHUB_API_KEY=""

Usage

python travisleak.py -o travis_user_name -m -out Directory_to_write_output_to

-m Optional to scan Organization's members



travis_exe2



Credits:-

The keywords for the potential leak was taken from ED's blog post here

The concept of entropy was adapted from here

Note

This tool still needs a lot of development. I would be glad if someone would like to contribute to this project.

Goals

  • Better output format
  • Support CircleCI scans

About

A tool to find sensitive keys and passwords in Travis logs

Resources

Releases

No releases published

Packages

No packages published

Languages