repo-audit
Deep analysis of Git history: identify frequently changed hotspot files, analyze code ownership by contributor, and scan for leaked secrets. Trigger…
它会碰到什么
这一栏是扫描器报的事实，不是结论。命中多不等于有毒（安全工具、规则库、示例脚本本来就会包含危险写法），命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系，需要你自己看。
技能内容
Repo Audit — Deep Analysis of Git History
Perform three-dimensional analysis on a Git repository: hotspot file detection, code ownership analysis, and secret leak scanning.
Feature Overview
1. Hotspot File Analysis (scripts/hotfiles.sh)
Identify the most frequently changed files in a repository to help spot:
- High-risk code areas (frequent changes = potential instability)
- Files that deserve extra attention during code review
- Modules that may need splitting or refactoring
Usage:
bash scripts/hotfiles.sh [options]| Option | Description | Default |
|--------|-------------|---------|
| --repo PATH | Repository path | Current directory |
| --top N | Show top N files | 20 |
| --since DATE | Start date (e.g. 2024-01-01) | None |
| --until DATE | End date | None |
| --author AUTHOR | Filter by author | None |
| --format FORMAT | Output format: table / csv / json | table |
2. Code Ownership Analysis (scripts/ownership.sh)
Analyze actual code ownership, reporting for each contributor within the specified scope:
- Commit count and percentage
- Lines changed (additions/deletions)
- Last active date
Usage:
bash scripts/ownership.sh [options]| Option | Description | Default |
|--------|-------------|---------|
| --repo PATH | Repository path | Current directory |
| --path SUBPATH | Analyze a specific subdirectory or file | Entire repo |
| --top N | Show top N contributors | 10 |
| --since DATE | Start date | None |
| --format FORMAT | Output format: table / csv / json | table |
3. Secret Leak Scanning (scripts/secret-scan.sh)
Scan the full Git history (including deleted commits) for common secrets and sensitive information:
- AWS Access Key / Secret Key
- GitHub / GitLab / Slack Tokens
- SSH Private Keys
- Generic API Keys, passwords, and secret patterns
Usage:
bash scripts/secret-scan.sh [options]| Option | Description | Default |
|--------|-------------|---------|
| --repo PATH | Repository path | Current directory |
| --branch BRANCH | Scan a specific branch | All branches |
| --since DATE | Start date | None |
| --format FORMAT | Output format: table / csv / json | table |
| --severity LEVEL | Minimum severity level: low / medium / high | low |
Use Cases
- Security audits: Scan history for leaked secrets before deploying to production
- Code review optimization: Identify hotspot files and prioritize reviewing high-risk areas
- Team collaboration: Understand who knows which parts of the code best, and assign reviews accordingly
- Tech debt assessment: Frequently changed files are strong candidates for refactoring
Dependencies
git(>= 2.20)bash(>= 4.0)- Standard Unix utilities:
awk,sort,head,grep
No additional dependencies or paid APIs required.
想直接用这个技能？
本站把开放许可（MIT / Apache 等）的技能按仓库打包整理到网盘，点一下转存到你自己的网盘，不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接，不打包。