auditpipe

command module
v0.0.0-...-ba50fff Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Dec 11, 2021 License: AGPL-3.0 Imports: 7 Imported by: 0

README

auditpipe
---------

In the modern day and age it's unfortunately become common to have to work
with untrusted piped content. Primarily software developers releasing install
scripts you're expected to pipe into bash. This software acts as a middleman
between two programs in a pipeline that allows you vet it and manually verify
it.

As an example, Rust has a tool called Rustup where you use a shell script to
install it. The command straight from their site is as follows:

curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh

Simply add auditpipe in the middle to allow you to quickly audit what's being
passed:

curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | auditpipe | sh

The contents of the file will be printed to stderr, and presents the option
of allowing it to pass through or denying it.

This program supports any environment with a POSIX-compliant /dev/tty.

Documentation

The Go Gopher

There is no documentation for this package.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL