mirror of
https://github.com/FuzzingLabs/fuzzforge_ai.git
synced 2026-02-12 19:12:49 +00:00
2da986ebb0
Add three production-ready secret detection workflows with full benchmarking infrastructure: **New Workflows:** - gitleaks_detection: Pattern-based secret scanning (13/32 benchmark secrets) - trufflehog_detection: Entropy-based detection with verification (1/32 benchmark secrets) - llm_secret_detection: AI-powered semantic analysis (32/32 benchmark secrets - 100% recall) **Benchmarking Infrastructure:** - Ground truth dataset with 32 documented secrets (12 Easy, 10 Medium, 10 Hard) - Automated comparison tools for precision/recall testing - SARIF output format for all workflows - Performance metrics and tool comparison reports **Fixes:** - Set gitleaks default to no_git=True for uploaded directories - Update documentation with correct secret counts and workflow names - Temporarily deactivate AI agent command - Clean up deprecated test files and GitGuardian workflow **Testing:** All workflows verified on secret_detection_benchmark and vulnerable_app test projects. Workers healthy and system fully functional.
43 lines
813 B
YAML
43 lines
813 B
YAML
name: gitleaks_detection
|
|
version: "1.0.0"
|
|
vertical: secrets
|
|
description: "Detect secrets and credentials using Gitleaks"
|
|
author: "FuzzForge Team"
|
|
tags:
|
|
- "secrets"
|
|
- "gitleaks"
|
|
- "git"
|
|
- "leak-detection"
|
|
|
|
workspace_isolation: "shared"
|
|
|
|
parameters:
|
|
type: object
|
|
properties:
|
|
scan_mode:
|
|
type: string
|
|
enum: ["detect", "protect"]
|
|
default: "detect"
|
|
description: "Scan mode: detect (entire repo history) or protect (staged changes)"
|
|
|
|
redact:
|
|
type: boolean
|
|
default: true
|
|
description: "Redact secrets in output"
|
|
|
|
no_git:
|
|
type: boolean
|
|
default: false
|
|
description: "Scan files without Git context"
|
|
|
|
default_parameters:
|
|
scan_mode: "detect"
|
|
redact: true
|
|
no_git: false
|
|
|
|
required_modules:
|
|
- "gitleaks"
|
|
|
|
supported_volume_modes:
|
|
- "ro"
|