EnvHunter 🔍

EnvHunter is a Ruby-based CLI tool that searches GitHub repositories or gists for .env files containing potentially sensitive high-entropy secrets like API keys or tokens.

⚙️ Features

🔎 Searches GitHub repos or gists for .env files
🧪 Detects .env variables with names containing KEY or TOKEN
📈 Filters secrets based on entropy (Shannon entropy)
💬 Outputs results in terminal, json, or csv formats
🔐 Uses GitHub API (requires a Personal Access Token)

🧰 Installation

As a Ruby Gem

gem install envhunter

Or clone and build locally:

git clone https://github.com/yourusername/envhunter.git
cd envhunter
gem build envhunter.gemspec
gem install envhunter-1.0.0.gem

🐳 Docker

docker build -t envhunter .
docker run --rm -e GITHUB_TOKEN=your_token_here envhunter scan --mode gists --format json

🚀 Usage

envhunter scan [options]

Options

Option	Description
`--mode`	`repos` (default) or `gists`
`--format`	`terminal`, `json`, or `csv`

🔐 Authentication

Set your GitHub token:

export GITHUB_TOKEN=your_token_here

📊 Output Example

=== High Entropy Keys Found ===

User: johndoe
Repo/Gist: johndoe/myrepo
File: .env
Match:
  API_TOKEN=abcd123...
----------------------------------------