chart-down
Download and scan Helm charts for secrets using TruffleHog.
Given a Helm repository URL, chart-down fetches the repo index, downloads every chart archive, extracts it, and runs TruffleHog against the contents.
Requisitos
- Go 1.19+
- TruffleHog en PATH (
brew install trufflehog)
Instalación
go install github.com/RandomRobbieBF/chart-down@latest
O compilar desde el código fuente:
git clone https://github.com/RandomRobbieBF/chart-down.git
cd chart-down
go build -o chart-down .
Uso
./chart-down -url <helm-repo-url> [-proxy <proxy-url>]
Opciones
| Opción | Obligatorio | Descripción |
|---|
-url | Sí | URL del repositorio Helm (añade /index.yaml si es necesario) |
-proxy | No | URL de proxy HTTP o SOCKS5 (p. ej. ) |
Ejemplos
# Basic scan
./chart-down -url https://charts.example.com
# Scan through a proxy
./chart-down -url https://charts.example.com -proxy http://127.0.0.1:8080
Salida
| Ruta | Descripción |
|---|
charts.txt | Lista de todas las URL de descarga de charts |
|
Revisar hallazgos:
# Verified secrets only
cat trufflehog-results/verified-secrets.json 2>/dev/null | jq .
# All findings
cat trufflehog-results/*.json | jq .
randomrobbiebf/chart-down
