Adding the capability for scanning a directory

[runako]

This PR adds the capability for truffleHog to recursively scan a directory instead of a Git repository with all its history. This can be useful in CI pipelines or other situations where it is desirable to scan the codebase at a single point in time. Additionally, it can also be used to scan code that is not stored in Git.

I've done some minor refactoring to the existing scanning code to reduce code duplication.

[ddnomad]

Wonder why this is still not merged :|

Would make multi-tool wrappers implementation so much better. Right now I'm cloning a repo and scan it with multiple tools and all except for truffleHog assume I've scanned a repo myself. Have to let truffleHog clone again to be able to use it as is (without forking) which is a total pita.

[anshumanbh]

@ddnomad Have you considered https://github.com/anshumanbh/git-all-secrets?

[ddnomad]

@anshumanbh Yep, that was a very first candidate. Sadly scanning to be done both on premises and locally and I'm not sure your tool supports it.

[dxa4481]

Sorry, been busy with a defcon talk and other life stuff, I'll carve out some time to go through the PR backlog soon

[jliviero]

Any movement on this? Would love to see this functionality.

[nabster11]

Hey @dxa4481 could you review this PR, I have a use-case where directory scanning is involved and not a git repo.

If you need to any help, I would love to take this up.

[BBerastegui]

Bump on this. 🎉

@dxa4481

[kiwiz]

I've also a use for this functionality & I'm willing to put effort to get this working.

[lberezy]

Hate to bump this but any updates?

[kiwiz]

Fwiw, I've been using this fork: https://github.com/feeltheajf/truffleHog3

[derBroBro]

@dxa4481 need this as well. :)

[moivica]

Any news? Really nice feature to have...

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.

---

Runako Godfrey seems not to be a GitHub user. You need a GitHub account to be able to sign the CLA. If you have already a GitHub account, please add the email address used for this commit to your account.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[dustin-decker]

Hey there, we've just released the next major version of TruffleHog!

It includes filesystem scanning!

It is a complete rewrite that scans more data sources and now supports detecting and verifying over 600 credentials.
Please check it out when you can.

https://trufflesecurity.com/blog/introducing-trufflehog-v3

We're no longer maintaining v2 so I am closing this PR.