Feature Request: Add ability to search for high-entropy strings
Open
aged
- Dominant language
- Shell
- Stars
- 13.4k
- Forks
- 1.3k
- PR merge metrics
- No merged PRs in 30d
Description
It would be useful to have this tool look for high-entropy strings as well. Generally good for detecting cryptographic secrets.
There is some "prior art" here with tools like https://github.com/dxa4481/truffleHog
Contributor guide
Research direction
The issue names no files, tests, or entry points, so first read the existing scanning behavior and determine where string detection is implemented. Review the linked truffleHog prior art, then define how high-entropy strings should be detected and verified; done means the tool identifies suitable cryptographic-secret candidates without losing existing behavior.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- shell
- Domain
- cli, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100