code-check

Node.js module to check your repository for private key files and JavaScript code for sensitive tokens and keys. Can help you prevent a commit if such files/code are found. It uses the Esprima parser to analyze the code ( esprima.org ).

Note: Fixed Esprima dependency & restrictedKeywords.json issues

Installation

npm install code-check

Usage

//Require the 'code-check' module
var codeCheck = require('code-check');

/*Run the check for sensitive files/code 
in your current working directory and its children*/
codeCheck.runCheck();

Configuration

Present in /node_modules/code-check/restrictedKeywords.json.

{
    "keyWords" : [
        "accessKeyId",
        "secretAccessKey",
        "token",
        "secret"
    ],

    "keyFiles" : [
        "keys",
        "key",
        "id_rsa",
        ".pub",
        ".pem"
    ],
    
    "ignored" : []	
}

Enter keywords to search for in your JavaScript code, in 'keyWords[]'.
Enter keywords to search for sensitive filenames, in 'keyFiles[]'.
Enter files to be ignored for sensitive content in 'ignored[]'.

Some defaults have been set up.

Result

After the check finishes running, the tool will give your repo a clean chit or warn you of potentially sensitive files/code in your repo