Skip to content

Commit ada82b6

Browse files
Integrate CryptonoutController as main repo base
1 parent 521ec1b commit ada82b6

2 files changed

Lines changed: 30 additions & 0 deletions

File tree

.devcontainer/devcontainer.json

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,10 @@
1+
{
2+
"image": "mcr.microsoft.com/devcontainers/universal:2",
3+
"features": {
4+
"ghcr.io/dhoeric/features/act:1": {},
5+
"ghcr.io/nikiforovall/devcontainer-features/dotnet-csharpier:1": {},
6+
"ghcr.io/devcontainers-extra/features/act:1": {},
7+
"ghcr.io/devcontainers-extra/features/actionlint:1": {},
8+
"ghcr.io/dotnet/aspire-devcontainer-feature/dotnetaspire:1": {}
9+
}
10+
}

scripts/scan-secrets.sh

Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
#!/bin/bash
2+
# Automated secret/key scan for the repo
3+
# Run every 12 hours via cron or CI
4+
5+
SCAN_REPORT="/workspaces/github-mcp-server/scripts/secret-scan-report-$(date +%Y%m%d%H%M).txt"
6+
7+
# Use gitleaks if available, else fallback to grep
8+
if command -v gitleaks &> /dev/null; then
9+
gitleaks detect --source /workspaces/github-mcp-server --report-path "$SCAN_REPORT"
10+
else
11+
echo "gitleaks not found, using grep fallback" > "$SCAN_REPORT"
12+
grep -rE '(private|secret|key|credential|password|token|api|pem|env|wallet|json|signer|controller|authority)' /workspaces/github-mcp-server >> "$SCAN_REPORT"
13+
fi
14+
15+
# Print summary
16+
if [ -s "$SCAN_REPORT" ]; then
17+
echo "[!] Secrets or keys found. See $SCAN_REPORT"
18+
else
19+
echo "[+] No secrets or keys found."
20+
fi

0 commit comments

Comments
 (0)