{
  "permissions": {
    "allow": [
      "Bash(go build:*)",
      "Bash(RAPID7_ENCRYPTED_CREDS='**eP3g488hQ23QiU4kJahhwPKs3PyE**' go test ./pkg/agents/ -run TestRules -v -count=1 -timeout 30s)",
      "Bash(gcloud sql instances list:*)",
    ]
  }
}

go install github.com/niels/claudleak/cmd/claudleak@latest

git clone https://github.com/niels/claudleak.git
cd claudleak
go build -o claudleak ./cmd/claudleak/

GITHUB_TOKEN="ghp_..." ./claudleak

# مسح حتى 50 مستودعًا، إخراج JSON إلى ملف
claudleak --max-repos 50 --json --output results.json

# مسح مفصّل مع 4 عمال
claudleak --workers 4 --verbose

# مسح مؤسسة محددة، الأسرار الموثقة فقط
claudleak --org microsoft --verified-only

cmd/claudleak/main.go    CLI entrypoint
pkg/config/              Config parsing
pkg/discovery/           GitHub repo discovery
pkg/cloner/              Git clone operations
pkg/scanner/             TruffleHog secret scanning
pkg/reporter/            Table/JSON output