HN user

LHardi

20 karma
Posts4
Comments11
View on HN

Hi there, I built this library after reading up some InfoSec SE posts about what sensitive files (and information) that should be gitignored or not included at all in a git repo.

The following article was also a motivation for me to start the project, “Dev put AWS keys on Github. Then BAD THINGS happened”: https://www.theregister.co.uk/2015/01/06/dev_blunder_shows_g...

How this library works: sniffgit starts from the root of your git working directory, and check if there are any sensitive files (id_rsa, *.cert, etc) that are exposed, i.e. files that haven't been gitignored or files that shouldn’t be in a repo at all.

This library also checks textfiles for sensitive information, such as AWS_SECRET_ACCESS_KEY, email, password, etc. Some files and directories are not going to be read at all, though (e.g. binary file, .git, yarn.lock).

Currently, the “sensitive info / line analysis” will have a lot of false positive result for larger projects. The reason is that it only checks for keyword such as “password, API_KEY, email, etc” for each line in a text file.

This is my first ever open-source project. Feedbacks are truly appreciated, particularly about OSS best practices :).

  Location: Davis, CA
  Remote: Yes
  Willing to relocate: Yes
  Technologies: Ruby on Rails, React, Python (Pandas, TensorFlow), Flask, C, Java, Git, Docker, Capybara, Selenium, MATLAB
  Résumé/CV: https://lili113.typeform.com/to/PTnaKv
  Email: https://lili113.typeform.com/to/PTnaKv
I'm a 4th year Computer Science student at UC Davis and I'm graduating in December 2017. I'm looking for an entry-level software engineering position (starting in January/February 2018).

Hi, I built this to help myself prepare for my next summer internship interviews. Some detail about this app:

- Interviewroom generates random questions, because I find that the surprise element is more helpful than preparing for a long list.

- You can login, save questions into your profile, and then compile them into a PDF file (“Save to Dropbox” feature coming soon :)).

- Button placement is a bit odd on wider screens, need to figure this out.

All suggestions are welcome :)