Directories
¶
| Path | Synopsis |
|---|---|
|
Package detect finds credentials in arbitrary byte content and knows, per provider, how to verify and revoke them.
|
Package detect finds credentials in arbitrary byte content and knows, per provider, how to verify and revoke them. |
|
anthropic
Package anthropic is the Anthropic credential provider: API keys, Admin API keys, and the OAuth access and refresh tokens Claude Code signs in with.
|
Package anthropic is the Anthropic credential provider: API keys, Admin API keys, and the OAuth access and refresh tokens Claude Code signs in with. |
|
aws
Package aws is the AWS credential provider: the access keys of IAM users and the temporary access keys STS hands out.
|
Package aws is the AWS credential provider: the access keys of IAM users and the temporary access keys STS hands out. |
|
azure
Package azure is the Microsoft Azure credential provider: the client secrets of Entra ID applications (service principals), storage account keys, and shared access signatures.
|
Package azure is the Microsoft Azure credential provider: the client secrets of Entra ID applications (service principals), storage account keys, and shared access signatures. |
|
gcp
Package gcp is the Google Cloud credential provider: service account keys, the application default credentials of a signed-in user, the OAuth access and refresh tokens they produce, and API keys.
|
Package gcp is the Google Cloud credential provider: service account keys, the application default credentials of a signed-in user, the OAuth access and refresh tokens they produce, and API keys. |
|
github
Package github is the GitHub credential provider: classic and fine-grained personal access tokens, OAuth and GitHub App tokens.
|
Package github is the GitHub credential provider: classic and fine-grained personal access tokens, OAuth and GitHub App tokens. |
|
jwt
Package jwt reads JSON Web Tokens without verifying them.
|
Package jwt reads JSON Web Tokens without verifying them. |
|
kubernetes
Package kubernetes is the provider for the credentials that reach a Kubernetes API server: the client certificates, bearer tokens and basic auth logins a kubeconfig carries, service account tokens wherever they turn up, and Secret manifests committed with their values in the clear.
|
Package kubernetes is the provider for the credentials that reach a Kubernetes API server: the client certificates, bearer tokens and basic auth logins a kubeconfig carries, service account tokens wherever they turn up, and Secret manifests committed with their values in the clear. |
|
openai
Package openai is the OpenAI credential provider: project, service account, admin and legacy user API keys.
|
Package openai is the OpenAI credential provider: project, service account, admin and legacy user API keys. |
|
providers
Package providers assembles the credential providers patty ships with.
|
Package providers assembles the credential providers patty ships with. |
|
registry
Package registry is the provider for OCI and Docker registry credentials: the logins a Docker config keeps per registry, wherever that config is embedded (a config.json, a Kubernetes pull secret, Helm values, a Basic Authorization header aimed at a registry), and the native tokens of Docker Hub and Quay.
|
Package registry is the provider for OCI and Docker registry credentials: the logins a Docker config keeps per registry, wherever that config is embedded (a config.json, a Kubernetes pull secret, Helm values, a Basic Authorization header aimed at a registry), and the native tokens of Docker Hub and Quay. |
|
slack
Package slack is the Slack credential provider: bot, user, app-level, refresh and configuration tokens, and incoming webhook URLs.
|
Package slack is the Slack credential provider: bot, user, app-level, refresh and configuration tokens, and incoming webhook URLs. |
|
sops
Package sops is the provider for the identities that decrypt sops-managed secrets: age identities and PGP private keys.
|
Package sops is the provider for the identities that decrypt sops-managed secrets: age identities and PGP private keys. |
|
Package disk keeps patty's clone cache within a byte budget and off the last free gigabytes of the drive.
|
Package disk keeps patty's clone cache within a byte budget and off the last free gigabytes of the drive. |
|
Package github talks to the GitHub API: repository discovery, size estimates for the disk budget and the activity feed that names commits a clone can no longer see.
|
Package github talks to the GitHub API: repository discovery, size estimates for the disk budget and the activity feed that names commits a clone can no longer see. |
|
Package gitrepo drives git plumbing for a repository patty scans.
|
Package gitrepo drives git plumbing for a repository patty scans. |
|
Package localcreds finds the credentials configured on this machine, so a report can say that a leaked token is not just out there but still in use right here.
|
Package localcreds finds the credentials configured on this machine, so a report can say that a leaked token is not just out there but still in use right here. |
|
Package report renders scan results for terminals and machines.
|
Package report renders scan results for terminals and machines. |
|
Package scan runs the detector over every object of a repository and attributes what it finds to commits, paths and refs.
|
Package scan runs the detector over every object of a repository and attributes what it finds to commits, paths and refs. |
|
Package source turns command line arguments into scan targets: local repositories, single GitHub repositories, or every repository of a user or organization.
|
Package source turns command line arguments into scan targets: local repositories, single GitHub repositories, or every repository of a user or organization. |
Click to show internal directories.
Click to hide internal directories.