See: https://github.com/gitleaks/gitleaks/issues/1222

Close closes the underlying reader and then waits for the command to complete, releasing its resources.

PathAllowed returns true if the path is allowed to be ignored.

FullPath returns the File.Path with any preceding outer paths

DetectSource scans the given source and returns a list of findings

RegexAllowed returns true if the regex is allowed to be ignored.

String displays the command used for GitCmd

Validate guards against common misconfigurations.

Detect scans the given fragment and returns a list of findings

NewDetector creates a new detector with the given config

NewDetectorDefaultConfig creates a new detector with the default config

CommitAllowed returns true if the commit is allowed to be ignored.

Fragments yields fragments for the this source

String returns a string representation for clearer debugging

detectRule scans the given fragment for the given rule and returns a list of findings

Wait waits for the command to exit and waits for any copying to stdin or copying from stdout or stderr to complete. Wait also closes underlying stdou

overlaps returns true if two startEnds overlap

AddFinding synchronously adds a finding to the findings slice

DetectGit runs detections against a GitCmd with its remote info Deprecated: Use sources.Git and detector.DetectSource instead

DetectString scans the given string and returns a list of findings

NewDetectorContext is the same as NewDetector but supports passing in a context to use for timeouts

NewGitDiffCmdContext is the same as NewGitDiffCmd but supports passing in a context to use for timeouts

NewGitLogCmdContext is the same as NewGitLogCmd but supports passing in a context to use for timeouts

NewRemoteInfoContext is the same as NewRemoteInfo but supports passing in a context to use for timeouts

Redact removes sensitive information from a finding.

merge takes two start/ends and returns a single one that encompasses both

shouldSkipPath checks a path against all the allowlists to see if it can be skipped

Decode returns the data with the values decoded in place along with the encoded segment meta data for the next pass of decoding

DetectContext is the same as Detect but supports passing in a context to use for timeouts

DetectFiles runs detections against a chanel of scan targets Deprecated: Use sources.Files and Detector.DetectSource instead

Deprecated: Use Files and detector.DetectSource instead

NewBlobReaderContext is the same as NewBlobReader but supports passing in a context to use for timeouts

NewDecoder creates a default decoder struct

Deprecated: use sources.NewRemoteInfo instead

abs returns the absolute value of an integer

add adds the values of two startEnds

AddCommit synchronously adds a commit to the commit slice

checkCommitOrPathAllowed evaluates |fragment| against all provided |allowlists|. If the match condition is "OR", only commit and path are checked. Ot

checkFindingAllowed evaluates |finding| against all provided |allowlists|. If the match condition is "OR", only regex and stopwords are run. (Commit

decodeIndividualEscapes decodes individual Unicode escape sequences (\u1234 format) This is a fallback for when we don't have a continuous sequence of

fileFragments reads the file into fragments to yield

hasByte can be used to check if a string has at least one of the provided bytes. Note: make sure byteset is long enough to handle the largest byte in

isPrintableASCII returns true if all bytes are printable ASCII