Searches for secrets in provided git repos. Built on top of https://github.com/nielsing/yar/
- Create and activate python3.8 virtual environment
- Update raider.yaml with your organizations / members / repos. Note that it searches all member's in an organizations repos as well, so no need to list members in the members section
- Add util/yarconfig.json. An example can be found at https://github.com/nielsing/yar/blob/master/config/yarconfig.json
- (Recommended) Create a github personal access token at https://github.com/settings/tokens and
export YAR_GITHUB_TOKEN=$yourtoken
python3.8 main.py
which will output all currently found secrets. All following runs will only show new secrets