A fast, lightweight command-line tool for validating API secrets using YAML templates. Written in Go.
Go Install:
go install github.com/theinfosecguy/archer/cmd/archer@latestDownload Binary:
# Linux
curl -L https://github.com/theinfosecguy/archer/releases/latest/download/archer-linux-amd64 -o archer
chmod +x archer
sudo mv archer /usr/local/bin/
# macOS (Apple Silicon)
curl -L https://github.com/theinfosecguy/archer/releases/latest/download/archer-darwin-arm64 -o archer
chmod +x archer
sudo mv archer /usr/local/bin/Build from source:
git clone https://github.com/theinfosecguy/archer.git
cd archer
make buildSecrets passed via CLI are exposed in shell history, process lists, and logs.
# List all available templates
archer list
# Get information about a template
archer info githubSingle Mode:
export ARCHER_SECRET="ghp_xxxxxxxxxxxxxxx"
archer validate githubMultipart Mode:
export ARCHER_VAR_BASE_URL="https://myblog.com"
export ARCHER_VAR_API_TOKEN="xxxxx"
archer validate ghostArcher includes built-in templates for 26+ services:
Run archer list to see all available templates.
# Clone and build
git clone https://github.com/theinfosecguy/archer.git
cd archer
make build
# Run tests
make test
# Build for all platforms
make release-allContributions are welcome! Please feel free to submit a Pull Request.
MIT License - see LICENSE file for details.
Get started now:
archer list
