README
¶
Pipeleak
Pipeleak is a tool designed to scan CI/CD logs and artifacts for secrets.
It supports the following platforms:
- GitLab
- GitHub
- BitBucket
- Azure DevOps
- Gitea
Once secrets are discovered, further exploitation often requires additional tooling. Pipeleak provides several helper commands to assist with this process.
Getting Started
To begin using Pipeleak, download the latest binary from the Releases page.
Alternatively, install using Go:
go install github.com/CompassSecurity/pipeleak/cmd/pipeleak@latest
Detailed command documentation can be found in the documentation.
Directories
¶
| Path | Synopsis |
|---|---|
|
cmd
|
|
|
pipeleak
command
|
|
|
pipeleak-bitbucket
command
|
|
|
pipeleak-devops
command
|
|
|
pipeleak-gitea
command
|
|
|
pipeleak-github
command
|
|
|
pipeleak-gitlab
command
|
|
|
internal
|
|
|
cmd/common
Package common provides shared functionality for pipeleak platform-specific binaries.
|
Package common provides shared functionality for pipeleak platform-specific binaries. |
|
pkg
|
|
|
config
Package config provides shared configuration types and validation helpers for pipeleak.
|
Package config provides shared configuration types and validation helpers for pipeleak. |
|
gitlab/nist
Package nist provides functionality to fetch vulnerability data from the NIST NVD API.
|
Package nist provides functionality to fetch vulnerability data from the NIST NVD API. |
|
httpclient
Package httpclient provides a centralized HTTP client configuration for pipeleak.
|
Package httpclient provides a centralized HTTP client configuration for pipeleak. |
|
tests
|
|
Click to show internal directories.
Click to hide internal directories.