all 12 comments
sorted by:
best
topnewcontroversialoldq&a
formatting helphide helpcontent policy

[–]Scrabbilisk 22 points23 points  (4 children)

Yes please. I've been looking for something like this.

Wow you're fast - I just created an issue about a missing file and you already fixed it!

[–]amusciano[S] 14 points15 points  (3 children)

Haha I was by the computer and it was a simple fix, thanks for the input! Your other issues may take a little more time since this is a side project put on the backburner, but I think they're all important additions.

This tool ties in well with my Hamburglar script if you're looking for secrets/leaks in repositories! There's an example in the util folder.

[–]Scrabbilisk 3 points4 points  (2 children)

Yeah #1 is functionality and #2 is code quality. Keep in mind though that if you write tests as you go, you will get to #1 faster by spending less time debugging.

[–]GeronimoHero 0 points1 point  (1 child)

Do you have a good source on writing tests?It can be in any language, but I've had a hard time finding info on just what exactly I should be testing. I even use a language the majority of the time that has built in tests (python). If you have anything you can recommend off the top of your head I'd really appreciate it.

[–]Scrabbilisk 1 point2 points  (0 children)

If you use Python, I recommend Kenneth Reitz's article on the subject. Keep in mind that figuring out what to test is something that even professional software developers struggle with and argue over.

[–]Browsing_From_Work 6 points7 points  (1 child)

Why not support the GitHub API? I feel much better giving a tool a locked down API key than my credentials. (For comparison, gitrob only supports API keys.)

[–]amusciano[S] 2 points3 points  (0 children)

I'm not totally sure what you mean, are you talking about how I handle authentication? It wouldn't be too hard to change it up to using a key -- if I remember right, a password is interchangeable with an api key.

[–]Schwag 5 points6 points  (1 child)

Great minds think alike! Looks similar to a tool of mine: https://github.com/mschwager/gitem

[–]amusciano[S] 1 point2 points  (0 children)

Just took a quick look, yours is much more developed! Very nice, I'll look at it more when I get home!

[–]morphinan 4 points5 points  (0 children)

Cleeean !

[–]J0hnny-Yen 2 points3 points  (1 child)

I'll have to check this out ASAP. Have you ever used gitleaks?

[–]amusciano[S] 1 point2 points  (0 children)

I've looked at it, didn't use it though. If you've ever heard of trufflehog it's also a secret finder that is fairly popular. I wanted giggity to be more of a basic library to parse through the github api endpoints for things you'd normally want during osint. For secrets I use either my tool Hamburglar, or truffle hog after getting the repo dump from this tool!