registry / claude-nomad / 0.56.1

claude-nomad@0.56.1

Sync Claude Code config (~/.claude/) across machines via a private Git repo, with path remapping and per-host settings overrides.

Static Scan Results

scanned 10d ago · by rust-scanner

Static analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 263 KB of source, external domains: cli.github.com, funkadelic.github.io, github.com, json.schemastore.org, registry.npmjs.org

Source & flagged code

6 flagged

.gitleaks.tomlView file

Lines 28-71text

28]

29paths = [

30 '''^shared/projects/[^/]+/.*\.jsonl$''',

31]

32condition = "AND"

34# Path-scoped: the documented test-fixture github-pat literal AND the three

35# entropy-variant placeholders (zero-suffix, alphabet, repeat-A) accumulate

36# in Claude Code session transcripts whenever a conversation touches the

37# Pitfall 4 docs, this allowlist itself, or a session-scrub discussion that

38# names one of the variants. Live sessions cannot be safely sed-scrubbed

39# (sed -i renames out from under the running CLI's open file descriptor

40# and silently drops post-rename writes), so the only sustainable

41# false-positive handler is a narrow allowlist scoped to synced session

42# paths. `condition = "AND"` requires BOTH a known literal AND a

43# `shared/projects/<logical>/.../*.jsonl` path; a real PAT in the same

44# file (different 36-char body) still fires.

45[[allowlists]]

46description = "claude-nomad: documented test-fixture github-pat literals + scrub placeholders in synced session transcripts"

47regexes = [

48 '''ghp_xJZbT3qfV2nLpKR8mYwH4dGtCsW9aE1uF6oA''',

Critical

Critical Secret

Package contains a critical-looking secret pattern.

.gitleaks.tomlView on unpkg · L48

Critical

Secret Pattern

GitHub personal access token in .gitleaks.toml

.gitleaks.tomlView on unpkg · L48

49 '''ghp_xJZbT3qfV2nLpKR8mYwH4dGtCs0000000000''',

Critical

Secret Pattern

GitHub personal access token in .gitleaks.toml

.gitleaks.tomlView on unpkg · L49

50 '''ghp_ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789''',

Critical

Secret Pattern

GitHub personal access token in .gitleaks.toml

.gitleaks.tomlView on unpkg · L50

51 '''ghp_AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA''',

Critical

Secret Pattern

GitHub personal access token in .gitleaks.toml

.gitleaks.tomlView on unpkg · L51

52]

53paths = [

54 '''^shared/projects/[^/]+/.*\.jsonl$''',

55]

56condition = "AND"

58# Path-scoped: SSH public-key fingerprints in git signature-verification

59# output (`git log --show-signature`, `git verify-commit`) land in session

60# transcripts as `Good "git" signature for <signer> with ED25519 key

61# SHA256:<43-char base64>`. The fingerprint is a hash of a PUBLIC key, not a

62# credential, but its 43-char base64 body trips generic-api-key. Anchoring on

63# the surrounding `with <keytype> key SHA256:` structure (via

64# regexTarget = "line") keeps this from whitelisting a bare token: a real

65# secret is never preceded by an SSH key-type label and the SHA256: scheme

66# prefix. `condition = "AND"` plus the session-jsonl path scope double-locks

67# it to synced transcripts.

68[[allowlists]]

69description = "claude-nomad: SSH public-key fingerprints (with <keytype> key SHA256:<b64>) in git signature output in synced session transcripts"

70regexTarget = "line"

71regexes = [

dist/nomad.mjsView file

Lines 83-123javascript

83 // .env, .env.local, .env.production

84 /\.pem$/i,

85 /\.key$/i,

86 /\.p12$/i,

87 /\.pfx$/i

Source & flagged code

6 flagged · loading source

.gitleaks.tomlView file

48patternName = github_pat severity = critical line = 48 matchedText = '''ghp_x...''',

Critical

Critical Secret

Package contains a critical-looking secret pattern.

.gitleaks.tomlView on unpkg · L48

48patternName = github_pat severity = critical line = 48 matchedText = '''ghp_x...''',

Critical

Secret Pattern

GitHub personal access token in .gitleaks.toml

.gitleaks.tomlView on unpkg · L48

49patternName = github_pat severity = critical line = 49 matchedText = '''ghp_x...''',

Critical

Secret Pattern

GitHub personal access token in .gitleaks.toml

.gitleaks.tomlView on unpkg · L49

50patternName = github_pat severity = critical line = 50 matchedText = '''ghp_A...''',

Critical

Secret Pattern

GitHub personal access token in .gitleaks.toml

.gitleaks.tomlView on unpkg · L50

51patternName = github_pat severity = critical line = 51 matchedText = '''ghp_A...''',

Critical

Secret Pattern

GitHub personal access token in .gitleaks.toml

.gitleaks.tomlView on unpkg · L51

dist/nomad.mjsView file

103var env = p.env || {}; L104: var isColorSupported = !(!!env.NO_COLOR || argv.includes("--no-color")) && (!!env.FORCE_COLOR || argv.includes("--color") || p.platform === "win32" || (p.stdout || {}).isTTY && env... L105: var formatter = (open, close, replace = open) => (input) => { ... L183: bold = (s) => enabled ? import_picocolors.default.bold(s) : s; L184: wslNarrowPad = process.env.WSL_DISTRO_NAME ? " " : ""; L185: okGlyph = `\u2713${wslNarrowPad}`; ... L192: // src/utils.ts L193: import { execFileSync } from "node:child_process"; L194: function gitCaptureRaw(args, cwd) { ... L205: const e = err; L206: if (e.stderr) process.stderr.write(e.stderr); L207: throw new NomadFatal(`${context} failed`);

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/nomad.mjsView on unpkg · L103

Findings

5 Critical2 Medium5 Low

CriticalCritical Secret.gitleaks.toml

CriticalSecret Pattern.gitleaks.toml

MediumEnvironment Vars

MediumInstall Persistencedist/nomad.mjs

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings