QuestionQ53

DevSecOps Pipeline-Operate and Monitor Stage

Which command should William use with GitGraber to search for secrets using a keyword — assume the keyword is yahoo — in order to detect sensitive information in real time within his organization's GitHub repository, after downloading GitGraber and installing its dependencies?

A. python3 gitGraber.py -p wordlist/keywordsfile.txt -q “\yahoo\” -s

B. python3 gitGraber.py -g wordlist/keywordsfile.txt -q “\yahoo\” -s

C. python3 gitGraber.py -k wordlist/keywordsfile.txt -q “\yahoo\” -s

D. python3 gitGraber.py -w wordlist/keywordsfile.txt -q “\yahoo\” -s

  • A python3 gitGraber.py -p wordlist/keywordsfile.txt -q “\yahoo\” -s
  • B python3 gitGraber.py -g wordlist/keywordsfile.txt -q “\yahoo\” -s
  • C python3 gitGraber.py -k wordlist/keywordsfile.txt -q “\yahoo\” -s
  • D python3 gitGraber.py -w wordlist/keywordsfile.txt -q “\yahoo\” -s
Explanation

In gitGraber, the -k (or --keyword) argument specifies the path to a keywords file that is used together with a search query (-q) to look for sensitive data such as API keys, tokens, and credentials across recently indexed GitHub files. The -s flag enables Slack notifications when matches are found. The tool's official usage examples explicitly show this combination, e.g., python3 gitGraber.py -k keywordsfile.txt -q "yahoo.com" -s, confirming that -k is the correct flag for supplying the keywords file. The -w flag serves a different purpose (dynamically generating a wordlist of discovered filenames), and -p/-g are not recognized gitGraber options.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!