7e28a23c22
secret-scan reports file:line/commit + lockbox KEY NAME or shape, never a value or fragment; env-names lists variable names/length/hash only. Same shapes as secret-guard. Seeded-fake tests. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
15 lines
733 B
Bash
Executable File
15 lines
733 B
Bash
Executable File
#!/usr/bin/env bash
|
|
# Install the shared hash-only secret tools on THIS machine (Windy 0): secret-scan + env-names.
|
|
# Source of truth is this repo (scripts/); re-run after a pull to update.
|
|
set -euo pipefail
|
|
here=$(cd "$(dirname "$0")" && pwd)
|
|
dest="$HOME/.local/share/secret-tools"
|
|
mkdir -p "$dest" "$HOME/.local/bin"
|
|
cp "$here/secret_shapes.py" "$here/secret_scan.py" "$here/env_names.py" "$dest/"
|
|
for pair in "secret-scan:secret_scan.py" "env-names:env_names.py"; do
|
|
n=${pair%%:*}; f=${pair##*:}
|
|
printf '#!/usr/bin/env bash\nexec python3 "%s/%s" "$@"\n' "$dest" "$f" > "$HOME/.local/bin/$n"
|
|
chmod 755 "$HOME/.local/bin/$n"
|
|
done
|
|
echo "installed secret-scan and env-names (shapes from secret_shapes.py, same as secret-guard)"
|