Skip to content

Latest commit

 

History

History
26 lines (17 loc) · 1.9 KB

README.md

File metadata and controls

26 lines (17 loc) · 1.9 KB

Screenshot 2021-09-22 at 4 28 48 pm

Entropy Scanner

Current Version Install Count Rating npm

Entropy Scanner detects high entropy strings in your code. This extension is implemented as a language server and client for Visual Studio Code.

High entropy strings may contain passwords, authentication tokens or private keys and should not be committed into version control. This extension provides real time insight into high entropy strings. You should still run pre-commit checks and scan code during continuous integration using another tool like tartufo.

Features

  • Highlight high entropy strings using Visual Studio Code diagnostics
  • Provides quick actions for excluding specific signatures
  • Respects the exclude-signatures, exclude-path-patterns and exclude-entropy-patterns options from your tartufo.toml

Known issues

  • This extension will nuke any comments in your tartufo.toml file when making changes, I haven't found a JavaScript TOML parser that does otherwise. Suggestions welcome!