Merge pull request #1811 from domwhewell-sage/trufflehog-scan_postman

Enhancement: Trufflehog accept postman workspaces
blacklanternsecurity · Oct 1, 2024 · aadbbe9 · aadbbe9
2 parents 3b52525 + 4eb472e
commit aadbbe9
Show file tree

Hide file tree

Showing 2 changed files with 320 additions and 11 deletions.
diff --git a/bbot/modules/trufflehog.py b/bbot/modules/trufflehog.py
@@ -99,6 +99,8 @@ async def handle_event(self, event):
                 module = "git"
             elif "docker" in event.tags:
                 module = "docker"
+            elif "postman" in event.tags:
+                module = "postman"
             else:
                 module = "filesystem"
         if event.type == "CODE_REPOSITORY":
@@ -164,6 +166,9 @@ async def execute_trufflehog(self, module, path):
         elif module == "docker":
             command.append("docker")
             command.append("--image=file://" + path)
+        elif module == "postman":
+            command.append("postman")
+            command.append("--workspace-paths=" + path)
         elif module == "filesystem":
             command.append("filesystem")
             command.append(path)