trufflesecurity/trufflehog

Azure Storage Account Blob Container Scanning Support

Open

#769 opened on Sep 1, 2022

View on GitHub
 (2 comments) (3 reactions) (0 assignees)Go (26,285 stars) (2,397 forks)batch import
contributions welcomedenhancementgood first issue

Description

Feature Request

In addition to the AWS S3 bucket scanning mode, it would be great if TruffleHog would also support the same for Azure Cloud's Storage Account Blob Container.

Problem to be Addressed

It's tedious to download all the Azure Storage Account Blob container contents manually to run TruffleHog on it.

Contributor guide

Tech stack
go
Domain
cloudsecurityapi
Issue type
feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
3-5 days
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
stale
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
clear
Prerequisites
Go proficiencyAzure Storage basicsTruffleHog architecture
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
40
Research direction
Examine the existing AWS S3 bucket scanning source in the TruffleHog codebase (likely in pkg/sources/). Understand how it authenticates and iterates over objects. Then, using the Azure SDK for Go, implement a similar source for Azure Blob Containers, handling authentication via connection strings or managed identities. Ensure the new source integrates with TruffleHog's existing scanning pipeline and outputs findings in the same format.