Code Search API

#1

Post by Lightning » Fri, Jul 19, 2013, 2:27 PM UTC

Re: Code Search API

#2

Post by JosephRedfern » Fri, Jul 19, 2013, 2:47 PM UTC

Looks good. Hopefully someone will write something to automagically search for unintentionally exposed sensitive files and notify the repo owner - when the "human" version of Code Search came out, a lot of private keys and other such things were discovered.

Re: Code Search API

#3

Post by negrit » Fri, Jul 19, 2013, 2:49 PM UTC

JosephRedfern wrote: post #2

Looks good. Hopefully someone will write something to automagically search for unintentionally exposed sensitive files and notify the repo owner - when the "human" version of Code Search came out, a lot of private keys and other such things were discovered.

Please someone code it.

Re: Code Search API

#4

Post by beaumartinez » Fri, Jul 19, 2013, 3:02 PM UTC

JosephRedfern wrote: post #2

Looks good. Hopefully someone will write something to automagically search for unintentionally exposed sensitive files and notify the repo owner - when the "human" version of Code Search came out, a lot of private keys and other such things were discovered.

The other possibility is that someone creates a malicious service that harvests and tries connecting using those keys. Scary indeed.

Re: Code Search API

#5

Post by mcantrell » Fri, Jul 19, 2013, 3:03 PM UTC

One great use for this would be to search for known vulnerable code and then get people to patch it.

Re: Code Search API

#6

Post by bowmessage » Fri, Jul 19, 2013, 3:14 PM UTC

Can't wait for a code completion editor plugin based off of this API.. 20 requests per minute isn't too bad.

Re: Code Search API

#7

Post by eli » Fri, Jul 19, 2013, 3:26 PM UTC

JosephRedfern wrote: post #2

Looks good. Hopefully someone will write something to automagically search for unintentionally exposed sensitive files and notify the repo owner - when the "human" version of Code Search came out, a lot of private keys and other such things were discovered.

I'm not sure I want automated bots contacting me through github.

Re: Code Search API

#8

Post by kylekyle » Fri, Jul 19, 2013, 3:28 PM UTC

What's wrong with command line git grep?

Re: Code Search API

#9

Post by ihsw » Fri, Jul 19, 2013, 3:33 PM UTC

eli wrote: post #7

JosephRedfern wrote: post #2

Looks good. Hopefully someone will write something to automagically search for unintentionally exposed sensitive files and notify the repo owner - when the "human" version of Code Search came out, a lot of private keys and other such things were discovered.

I'm not sure I want automated bots contacting me through github.

Why not? Serious question.

Re: Code Search API

#10

Post by ihsw » Fri, Jul 19, 2013, 3:34 PM UTC

kylekyle wrote: post #8

What's wrong with command line git grep?

It doesn't search though every repository on github.