Gitea Scan

* Implemented Gitea scan command

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: frjcomp <107982661+frjcomp@users.noreply.github.com>

Author: Copilot

.github/workflows/test.yml

@@ -0,0 +1,37 @@
+name: Tests
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    name: Go Tests
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v5
+      
+      - uses: actions/setup-go@v6
+        with:
+          go-version: stable
+      
+      - name: Run tests
+        working-directory: ./src/pipeleak
+        run: go test ./... -v -race -coverprofile=coverage.out -covermode=atomic
+      
+      - name: Display coverage
+        working-directory: ./src/pipeleak
+        run: go tool cover -func=coverage.out
+      
+      - name: Upload coverage reports
+        uses: codecov/codecov-action@v5
+        with:
+          files: ./src/pipeleak/coverage.out
+          flags: unittests
+          name: codecov-umbrella
+        continue-on-error: true

.gitignore

@@ -3,4 +3,5 @@ rules.yml
 dist
 renovate-enum-out
 cli-docs
-site
+site
+src/pipeleak/pipeleak

readme.md

@@ -14,6 +14,7 @@ It supports the following platforms:
 * GitHub
 * BitBucket
 * Azure DevOps
+* Gitea
 
 Once secrets are discovered, further exploitation often requires additional tooling. Pipeleak provides several helper commands to assist with this process.
 

src/pipeleak/cmd/gitea/enum.go src/pipeleak/cmd/gitea/enum/enum.gosrc/pipeleak/cmd/gitea/enum.go renamed to src/pipeleak/cmd/gitea/enum/enum.go

@@ -1,12 +1,20 @@
-package gitea
+package enum
 
 import (
+	"fmt"
+
 	"code.gitea.io/sdk/gitea"
 	"github.com/CompassSecurity/pipeleak/helper"
 	"github.com/rs/zerolog/log"
 	"github.com/spf13/cobra"
 )
 
+var (
+	giteaApiToken string
+	giteaUrl      string
+	verbose       bool
+)
+
 func NewEnumCmd() *cobra.Command {
 	enumCmd := &cobra.Command{
 		Use:     "enum",
@@ -24,17 +32,26 @@ func NewEnumCmd() *cobra.Command {
 func Enum(cmd *cobra.Command, args []string) {
 	helper.SetLogLevel(verbose)
 
-	client, err := gitea.NewClient(giteaUrl, gitea.SetToken(giteaApiToken))
+	if err := runEnum(giteaUrl, giteaApiToken); err != nil {
+		log.Fatal().Stack().Err(err).Msg("Enumeration failed")
+	}
+}
+
+// runEnum contains the core enumeration logic and returns errors instead of calling Fatal
+func runEnum(giteaURL, apiToken string) error {
+	client, err := gitea.NewClient(giteaURL, gitea.SetToken(apiToken))
 	if err != nil {
-		log.Fatal().Stack().Err(err).Msg("Failed creating gitea client")
-		return
+		return err
 	}
 
 	log.Info().Msg("Enumerating User")
 	user, _, err := client.GetMyUserInfo()
 	if err != nil {
-		log.Fatal().Stack().Err(err).Msg("Failed fetching current user")
-		return
+		return err
+	}
+
+	if user == nil {
+		return fmt.Errorf("failed fetching current user (nil response)")
 	}
 
 	log.Debug().Interface("user", user).Msg("Full user data structure")
@@ -185,4 +202,5 @@ func Enum(cmd *cobra.Command, args []string) {
 	}
 
 	log.Info().Msg("Done")
+	return nil
 }