Decode Base64 blobs and scan their contents for secrets while skipping short strings for performance. This has a small performance impact and can be disabled with --no-base64

This commit is contained in:
Mick Grove 2025-08-30 19:40:11 -07:00
commit fc0be774b4
17 changed files with 91 additions and 42 deletions

View file

@ -92,6 +92,10 @@ pub struct ScanArgs {
#[arg(long, short = 'r', default_value_t = false)]
pub redact: bool,
/// Skip decoding Base64 blobs before scanning
#[arg(long, default_value_t = false)]
pub no_base64: bool,
/// Timeout for Git repository scanning in seconds
#[arg(long, default_value_t = 1800, value_name = "SECONDS")]
pub git_repo_timeout: u64,