Skip to content

theinfosecguy/archer

Repository files navigation

Archer

archer-logo

A fast, lightweight command-line tool for validating API secrets using YAML templates. Written in Go.

Installation

Go Install:

go install github.com/theinfosecguy/archer/cmd/archer@latest

Download Binary:

# Linux
curl -L https://github.com/theinfosecguy/archer/releases/latest/download/archer-linux-amd64 -o archer
chmod +x archer
sudo mv archer /usr/local/bin/

# macOS (Apple Silicon)
curl -L https://github.com/theinfosecguy/archer/releases/latest/download/archer-darwin-arm64 -o archer
chmod +x archer
sudo mv archer /usr/local/bin/

Build from source:

git clone https://github.com/theinfosecguy/archer.git
cd archer
make build

Security Warning

⚠️ Always use environment variables instead of passing secrets as command-line arguments.

Secrets passed via CLI are exposed in shell history, process lists, and logs.

Usage

Basic Commands

# List all available templates
archer list

# Get information about a template
archer info github

Validating Secrets

Single Mode:

export ARCHER_SECRET="ghp_xxxxxxxxxxxxxxx"
archer validate github

Multipart Mode:

export ARCHER_VAR_BASE_URL="https://myblog.com"
export ARCHER_VAR_API_TOKEN="xxxxx"
archer validate ghost

Supported Services

Archer includes built-in templates for 26+ services:

Service Template Name Mode
Airtable airtable single
Asana asana single
CircleCI circleci single
ClickUp clickup single
Codacy codacy single
Datadog datadog single
DigitalOcean digitalocean single
Discord discord single
Figma figma single
Ghost ghost multipart
GitHub github single
GitLab gitlab single
Heroku heroku single
JotForm jotform single
Linear linear single
Miro miro single
New Relic newrelic single
Notion notion single
npm npm single
OpenAI openai single
Postman postman single
Sentry sentry single
Slack slack single
Stripe stripe single
Supabase supabase single
Vercel vercel single

Run archer list to see all available templates.

Development

# Clone and build
git clone https://github.com/theinfosecguy/archer.git
cd archer
make build

# Run tests
make test

# Build for all platforms
make release-all

Contributing

Contributions are welcome! Please feel free to submit a Pull Request.

License

MIT License - see LICENSE file for details.


Get started now:

archer list

About

Don't just scan for secrets, validate them.

Resources

License

Stars

Watchers

Forks

Packages

No packages published