2023-11-11 00:25:45 +00:00
|
|
|
# GitMon
|
|
|
|
|
Monitor GitHub events and clone repositories to search for secrets, and more.
|
|
|
|
|
|
2023-11-11 16:21:56 +00:00
|
|
|
|
|
|
|
|
|
2023-11-11 00:25:45 +00:00
|
|
|
## Overview
|
2023-11-11 00:41:20 +00:00
|
|
|
GitMon allows an operator to continually monitor the [GitHub Events API](https://docs.github.com/en/rest/activity/events)
|
|
|
|
|
to collect metadata and look for secret leakage.
|
2023-11-11 00:25:45 +00:00
|
|
|
|
|
|
|
|
When certain events such as _CreateEvent_ or _DeleteEvent_ are observed, GitMon
|
|
|
|
|
will send the repository URL to a worker that will clone the repository and
|
|
|
|
|
search for API keys, passwords, endpoints, and more.
|
|
|
|
|
|
|
|
|
|
GitMon will also build a table that maps commit email addresses to GitHub usernames.
|
|
|
|
|
|
2023-11-11 04:20:43 +00:00
|
|
|
## Caught Slippin'
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2023-11-11 00:25:45 +00:00
|
|
|
## Contributors
|
|
|
|
|
- agathanonymous
|
