11 KiB
11 KiB
phase, plan, type, wave, depends_on, files_modified, autonomous, requirements, must_haves
| phase | plan | type | wave | depends_on | files_modified | autonomous | requirements | must_haves | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 10-osint-code-hosting | 09 | execute | 3 |
|
|
true |
|
Purpose: Users can run keyhunter recon full --sources=github,gitlab,... and get
actual findings from any Phase 10 source whose credential is configured.
Output: Wired register.go + cmd/recon.go + passing integration test.
<execution_context> @$HOME/.claude/get-shit-done/workflows/execute-plan.md @$HOME/.claude/get-shit-done/templates/summary.md </execution_context>
@.planning/phases/10-osint-code-hosting/10-CONTEXT.md @.planning/phases/10-osint-code-hosting/10-01-SUMMARY.md @.planning/phases/10-osint-code-hosting/10-02-SUMMARY.md @.planning/phases/10-osint-code-hosting/10-03-SUMMARY.md @.planning/phases/10-osint-code-hosting/10-04-SUMMARY.md @.planning/phases/10-osint-code-hosting/10-05-SUMMARY.md @.planning/phases/10-osint-code-hosting/10-06-SUMMARY.md @.planning/phases/10-osint-code-hosting/10-07-SUMMARY.md @.planning/phases/10-osint-code-hosting/10-08-SUMMARY.md @pkg/recon/engine.go @pkg/recon/source.go @pkg/providers/registry.go @cmd/recon.go After Wave 2, each source file in pkg/recon/sources/ exports a constructor roughly of the form: func NewGitHubSource(token, reg, lim) *GitHubSource func NewGitLabSource(token, reg, lim) *GitLabSource func NewBitbucketSource(token, workspace, reg, lim) *BitbucketSource func NewGistSource(token, reg, lim) *GistSource func NewCodebergSource(token, reg, lim) *CodebergSource func NewHuggingFaceSource(token, reg, lim) *HuggingFaceSource func NewReplitSource(reg, lim) *ReplitSource func NewCodeSandboxSource(reg, lim) *CodeSandboxSource func NewSandboxesSource(reg, lim) *SandboxesSource func NewKaggleSource(user, key, reg, lim) *KaggleSource(Verify actual signatures when reading Wave 2 SUMMARYs before writing register.go.)
Task 1: Wire RegisterAll + register_test.go pkg/recon/sources/register.go, pkg/recon/sources/register_test.go - Test A: RegisterAll with a fresh engine and empty SourcesConfig registers all 10 sources by name (GitHub/GitLab/Bitbucket/Gist/Codeberg/HuggingFace/Replit/CodeSandbox/Sandboxes/Kaggle) - Test B: engine.List() returns all 10 source names in sorted order - Test C: Calling RegisterAll(nil, cfg) is a no-op (no panic) - Test D: Sources without creds are still registered but their Enabled() returns false Rewrite `pkg/recon/sources/register.go` RegisterAll body to construct each source with appropriate fields from SourcesConfig and call engine.Register: ```go func RegisterAll(engine *recon.Engine, cfg SourcesConfig) { if engine == nil { return } reg := cfg.Registry lim := cfg.Limiters engine.Register(NewGitHubSource(cfg.GitHubToken, reg, lim)) engine.Register(NewGitLabSource(cfg.GitLabToken, reg, lim)) engine.Register(NewBitbucketSource(cfg.BitbucketToken, cfg.BitbucketWorkspace, reg, lim)) engine.Register(NewGistSource(cfg.GitHubToken, reg, lim)) engine.Register(NewCodebergSource(cfg.CodebergToken, reg, lim)) engine.Register(NewHuggingFaceSource(cfg.HuggingFaceToken, reg, lim)) engine.Register(NewReplitSource(reg, lim)) engine.Register(NewCodeSandboxSource(reg, lim)) engine.Register(NewSandboxesSource(reg, lim)) engine.Register(NewKaggleSource(cfg.KaggleUser, cfg.KaggleKey, reg, lim)) } ```Extend SourcesConfig with any fields Wave 2 introduced (BitbucketWorkspace,
CodebergToken). Adjust field names to actual Wave 2 SUMMARY signatures.
Create `pkg/recon/sources/register_test.go`:
- Build minimal registry via providers.NewRegistryFromProviders with 1 synthetic provider
- Build recon.Engine, call RegisterAll with cfg having all creds empty
- Assert eng.List() returns exactly these 10 names:
bitbucket, codeberg, codesandbox, gist, github, gitlab, huggingface, kaggle, replit, sandboxes
- Assert nil engine call is no-op (no panic)
Update `cmd/recon.go`:
- Import `github.com/salvacybersec/keyhunter/pkg/recon/sources`, `github.com/spf13/viper`, and the providers package
- In `buildReconEngine()`:
```go
func buildReconEngine() *recon.Engine {
e := recon.NewEngine()
e.Register(recon.ExampleSource{})
reg, err := providers.NewRegistry()
if err != nil {
fmt.Fprintf(os.Stderr, "recon: failed to load providers: %v\n", err)
return e
}
cfg := sources.SourcesConfig{
Registry: reg,
Limiters: recon.NewLimiterRegistry(),
GitHubToken: firstNonEmpty(os.Getenv("GITHUB_TOKEN"), viper.GetString("recon.github.token")),
GitLabToken: firstNonEmpty(os.Getenv("GITLAB_TOKEN"), viper.GetString("recon.gitlab.token")),
BitbucketToken: firstNonEmpty(os.Getenv("BITBUCKET_TOKEN"), viper.GetString("recon.bitbucket.token")),
BitbucketWorkspace: viper.GetString("recon.bitbucket.workspace"),
CodebergToken: firstNonEmpty(os.Getenv("CODEBERG_TOKEN"), viper.GetString("recon.codeberg.token")),
HuggingFaceToken: firstNonEmpty(os.Getenv("HUGGINGFACE_TOKEN"), viper.GetString("recon.huggingface.token")),
KaggleUser: firstNonEmpty(os.Getenv("KAGGLE_USERNAME"), viper.GetString("recon.kaggle.username")),
KaggleKey: firstNonEmpty(os.Getenv("KAGGLE_KEY"), viper.GetString("recon.kaggle.key")),
}
sources.RegisterAll(e, cfg)
return e
}
func firstNonEmpty(a, b string) string { if a != "" { return a }; return b }
```
- Preserve existing reconFullCmd / reconListCmd behavior.
<success_criteria> All Phase 10 code hosting sources registered via sources.RegisterAll, wired into cmd/recon.go, and exercised end-to-end by an integration test hitting httptest fixtures for every source. Phase 10 requirements RECON-CODE-01..10 complete. </success_criteria>
After completion, create `.planning/phases/10-osint-code-hosting/10-09-SUMMARY.md`.