Minor features

.devcontainer/devcontainer.json

@@ -1,4 +1,21 @@
 {
   "image": "mcr.microsoft.com/devcontainers/universal:2",
-  "features": {}
+  "features": {
+    "ghcr.io/devcontainers/features/rust:1": {
+      "version": "latest",
+      "profile": "default"
+    },
+    "ghcr.io/devcontainers-contrib/features/vault-asdf:2": {
+      "version": "latest"
+    }
+  },
+  "customizations": {
+    "vscode": {
+      "extensions": [
+        "rust-lang.rust-analyzer",
+        "serayuzgur.crates"
+      ]
+    }
+  },
+  "postCreateCommand": "rustup component add rustfmt clippy && vault version"
 }

.devcontainer/install-vault.sh

@@ -0,0 +1,23 @@
+#!/bin/bash
+
+# Install HashiCorp Vault
+set -e
+
+echo "Installing HashiCorp Vault..."
+
+# Add HashiCorp GPG key
+curl -fsSL https://apt.releases.hashicorp.com/gpg | gpg --dearmor | sudo tee /usr/share/keyrings/hashicorp-archive-keyring.gpg > /dev/null
+
+# Add HashiCorp repository
+echo "deb [signed-by=/usr/share/keyrings/hashicorp-archive-keyring.gpg] https://apt.releases.hashicorp.com $(lsb_release -cs) main" | sudo tee /etc/apt/sources.list.d/hashicorp.list
+
+# Update package index
+sudo apt update
+
+# Install Vault
+sudo apt install -y vault
+
+# Verify installation
+vault version
+
+echo "Vault installation completed successfully!"

Makefile

@@ -0,0 +1,197 @@
+.PHONY: help build install test clean fmt lint run check all
+
+# Default target
+help:
+	@echo "Available targets:"
+	@echo ""
+	@echo "Build & Test:"
+	@echo "  make build            - Build the project in debug mode"
+	@echo "  make release          - Build the project in release mode"
+	@echo "  make install          - Install the binary locally"
+	@echo "  make test             - Run all tests"
+	@echo "  make check            - Run cargo check"
+	@echo "  make fmt              - Format code with rustfmt"
+	@echo "  make lint             - Run clippy linter"
+	@echo "  make clean            - Clean build artifacts"
+	@echo "  make all              - Format, lint, test, and build"
+	@echo ""
+	@echo "Running:"
+	@echo "  make run              - Run the application"
+	@echo "  make init-config      - Initialize a sample config file"
+	@echo "  make run-example      - Run with example config (needs Vault)"
+	@echo "  make demo             - Quick demo with Vault env vars"
+	@echo ""
+	@echo "Vault Development:"
+	@echo "  make vault-docker           - Start Vault in Docker (token: root)"
+	@echo "  make vault-docker-stop      - Stop Vault Docker container"
+	@echo "  make vault-create-test-secrets - Create test secrets in Vault"
+	@echo "  make vault-flag-test-secrets   - Flag test secrets for rotation"
+	@echo "  make vault-full-setup       - Complete Vault setup with test data"
+	@echo "  make dev-with-vault         - Run scan with temporary Vault"
+	@echo "  make install-vault          - Install Vault CLI"
+	@echo "  make vault-dev              - Start Vault dev server (CLI)"
+	@echo "  make vault-setup            - Show Vault environment setup commands"
+
+# Build in debug mode
+build:
+	cargo build
+
+# Build in release mode
+release:
+	cargo build --release
+
+# Install the binary locally
+install:
+	cargo install --path .
+
+# Run all tests
+test:
+	cargo test
+
+# Run cargo check
+check:
+	cargo check
+
+# Format code
+fmt:
+	cargo fmt
+
+# Run clippy
+lint:
+	cargo clippy -- -D warnings
+
+# Clean build artifacts
+clean:
+	cargo clean
+
+# Run the application
+run:
+	cargo run
+
+# Run in development mode with arguments
+run-scan:
+	cargo run -- scan
+
+run-auto:
+	cargo run -- auto
+
+# Complete workflow: format, lint, test, and build
+all: fmt lint test build
+
+# Watch mode for development (requires cargo-watch)
+watch:
+	@command -v cargo-watch >/dev/null 2>&1 || { echo "cargo-watch not installed. Run: cargo install cargo-watch"; exit 1; }
+	cargo watch -x check -x test -x run
+
+# Install development dependencies
+dev-deps:
+	cargo install cargo-watch
+	rustup component add rustfmt clippy
+
+# Generate documentation
+docs:
+	cargo doc --no-deps --open
+
+# Run with example config
+run-example:
+	@echo "Note: This requires Vault to be running. Use 'make vault-docker' in another terminal first."
+	cargo run -- --config examples/config.toml scan
+
+# Quick demo: run example with Vault environment variables (if Vault is running)
+demo:
+	@echo "Running demo (ensure Vault is running with 'make vault-docker')..."
+	VAULT_ADDR='http://127.0.0.1:8200' VAULT_TOKEN='root' cargo run -- scan
+
+# Initialize a config file
+init-config:
+	cargo run -- init
+
+# Install Vault CLI if not present
+install-vault:
+	@if command -v vault >/dev/null 2>&1; then \
+		echo "Vault CLI already installed: $$(vault version)"; \
+	else \
+		echo "Installing Vault CLI..."; \
+		wget -O- https://apt.releases.hashicorp.com/gpg | gpg --dearmor | sudo tee /usr/share/keyrings/hashicorp-archive-keyring.gpg >/dev/null; \
+		echo "deb [signed-by=/usr/share/keyrings/hashicorp-archive-keyring.gpg] https://apt.releases.hashicorp.com $$(lsb_release -cs) main" | sudo tee /etc/apt/sources.list.d/hashicorp.list; \
+		sudo apt update && sudo apt install -y vault; \
+		echo "Vault CLI installed: $$(vault version)"; \
+	fi
+
+# Development: start a local Vault server using Docker
+vault-docker:
+	@if ! command -v docker >/dev/null 2>&1; then \
+		echo "Docker not installed. Please install Docker first."; \
+		exit 1; \
+	fi
+	@echo "Starting Vault in Docker..."
+	@echo "Root token: root"
+	@echo "Vault address: http://127.0.0.1:8200"
+	docker run --rm --name vault-dev \
+		-p 8200:8200 \
+		-e 'VAULT_DEV_ROOT_TOKEN_ID=root' \
+		-e 'VAULT_DEV_LISTEN_ADDRESS=0.0.0.0:8200' \
+		hashicorp/vault:latest
+
+# Stop the Docker Vault container
+vault-docker-stop:
+	@docker stop vault-dev 2>/dev/null || echo "Vault container not running"
+
+# Development: start a local Vault server using Vault CLI
+vault-dev: install-vault
+	vault server -dev -dev-root-token-id=root
+
+# Development: setup Vault dev environment in another terminal
+vault-setup:
+	@echo "Run these commands in your terminal:"
+	@echo "export VAULT_ADDR='http://127.0.0.1:8200'"
+	@echo "export VAULT_TOKEN='root'"
+
+# Create test secrets in Vault (requires Vault to be running)
+vault-create-test-secrets:
+	@echo "Creating test secrets in Vault..."
+	@docker exec vault-dev vault kv put secret/database/postgres password=old_postgres_pass username=dbuser || \
+		VAULT_ADDR='https://127.0.0.1:8200' VAULT_TOKEN='root' vault kv put secret/database/postgres password=old_postgres_pass username=dbuser
+	@docker exec vault-dev vault kv put secret/api/github token=ghp_old_token_12345 || \
+		VAULT_ADDR='https://127.0.0.1:8200' VAULT_TOKEN='root' vault kv put secret/api/github token=ghp_old_token_12345
+	@docker exec vault-dev vault kv put secret/app/secret_key key=old_secret_key_value || \
+		VAULT_ADDR='https://127.0.0.1:8200' VAULT_TOKEN='root' vault kv put secret/app/secret_key key=old_secret_key_value
+	@echo "Test secrets created!"
+
+# Flag test secrets for rotation
+vault-flag-test-secrets:
+	@echo "Flagging test secrets for rotation..."
+	VAULT_ADDR='http://127.0.0.1:8200' VAULT_TOKEN='root' cargo run -- flag secret/database/postgres
+	VAULT_ADDR='http://127.0.0.1:8200' VAULT_TOKEN='root' cargo run -- flag secret/api/github
+	@echo "Test secrets flagged!"
+
+# Complete setup: start Vault, create secrets, flag them
+vault-full-setup:
+	@echo "Starting Vault in background..."
+	@docker run -d --rm --name vault-dev \
+		-p 8200:8200 \
+		-e 'VAULT_DEV_ROOT_TOKEN_ID=root' \
+		-e 'VAULT_DEV_LISTEN_ADDRESS=0.0.0.0:8200' \
+		hashicorp/vault:latest >/dev/null 2>&1 || echo "Vault already running"
+	@echo "Waiting for Vault to be ready..."
+	@sleep 3
+	@$(MAKE) vault-create-test-secrets
+	@$(MAKE) vault-flag-test-secrets
+	@echo ""
+	@echo "✓ Vault is ready with test secrets!"
+	@echo "  Run: make demo"
+
+# Development: run with Vault Docker container (starts vault, runs command, stops vault)
+dev-with-vault:
+	@echo "Starting Vault in background..."
+	@docker run -d --rm --name vault-dev-tmp \
+		-p 8200:8200 \
+		-e 'VAULT_DEV_ROOT_TOKEN_ID=root' \
+		-e 'VAULT_DEV_LISTEN_ADDRESS=0.0.0.0:8200' \
+		hashicorp/vault:latest >/dev/null
+	@echo "Waiting for Vault to be ready..."
+	@sleep 3
+	@echo "Running command with Vault..."
+	@VAULT_ADDR='http://127.0.0.1:8200' VAULT_TOKEN='root' cargo run -- scan || true
+	@echo "Stopping Vault..."
+	@docker stop vault-dev-tmp >/dev/null