README
¶
Pipeleak
Pipeleak is a tool designed to scan CI/CD logs and artifacts for secrets.
It supports the following platforms:
- GitLab
- GitHub
- BitBucket
- Azure DevOps
- Gitea
Once secrets are discovered, further exploitation often requires additional tooling. Pipeleak provides several helper commands to assist with this process.
Getting Started
To begin using Pipeleak, download the latest binary from the Releases page.
Alternatively, install using Go:
go install github.com/CompassSecurity/pipeleak/cmd/pipeleak@latest
Detailed command documentation can be found in the documentation.
Directories
¶
| Path | Synopsis |
|---|---|
|
cmd
|
|
|
pipeleak
command
|
|
|
internal
|
|
|
pkg
|
|
|
config
Package config provides shared configuration types and validation helpers for pipeleak.
|
Package config provides shared configuration types and validation helpers for pipeleak. |
|
gitlab/nist
Package nist provides functionality to fetch vulnerability data from the NIST NVD API.
|
Package nist provides functionality to fetch vulnerability data from the NIST NVD API. |
|
httpclient
Package httpclient provides a centralized HTTP client configuration for pipeleak.
|
Package httpclient provides a centralized HTTP client configuration for pipeleak. |
|
tests
|
|
Click to show internal directories.
Click to hide internal directories.