{"id":13581307,"url":"https://github.com/codecentric/certspotter-sd","last_synced_at":"2025-08-04T09:33:04.997Z","repository":{"id":64303443,"uuid":"292843283","full_name":"codecentric/certspotter-sd","owner":"codecentric","description":"certspotter api based prometheus service discovery","archived":false,"fork":false,"pushed_at":"2020-12-09T07:41:41.000Z","size":56,"stargazers_count":3,"open_issues_count":1,"forks_count":0,"subscribers_count":2,"default_branch":"master","last_synced_at":"2025-03-10T19:28:05.454Z","etag":null,"topics":["blackbox-exporter","certificate-transparency","certspotter","prometheus","prometheus-service-discovery"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/codecentric.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2020-09-04T12:32:36.000Z","updated_at":"2023-10-22T12:19:33.000Z","dependencies_parsed_at":"2023-01-15T10:00:48.358Z","dependency_job_id":null,"html_url":"https://github.com/codecentric/certspotter-sd","commit_stats":null,"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/codecentric/certspotter-sd","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codecentric%2Fcertspotter-sd","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codecentric%2Fcertspotter-sd/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codecentric%2Fcertspotter-sd/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codecentric%2Fcertspotter-sd/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/codecentric","download_url":"https://codeload.github.com/codecentric/certspotter-sd/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/codecentric%2Fcertspotter-sd/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":268675515,"owners_count":24288285,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-04T02:00:09.867Z","response_time":79,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["blackbox-exporter","certificate-transparency","certspotter","prometheus","prometheus-service-discovery"],"created_at":"2024-08-01T15:02:00.157Z","updated_at":"2025-08-04T09:33:04.963Z","avatar_url":"https://github.com/codecentric.png","language":"Go","readme":"This repository contains code for a prometheus service discovery on top of the\n[SSLMate Cert Spotter][1]. The service discovery can be used to implement a\nautomatic certificate expiration monitoring using the prometheus\nblackbox-exporter.\n\n## Installation\n\nThe certspotter discovery can be installed by downloading the executable from\nthe [releases page][2] or by building it locally using make or docker.\n\n```bash\nmake\n# or\ndocker build -t certspotter-sd .\n```\n\n## Configuration\n\nThe certspotter service discovery can be configured using a configuration file\nand command-line flags (configuration file to load and setting the logging\nseverity).\n\nThe configuration uses the following format.\n```yaml\n# global configuartion\nglobal:\n  # interval to use between polling the certspotter api.\n  polling_interval: \u003cduration\u003e\n  # rate limit to use for certspotter api (configured in Hz).\n  rate_limit: \u003cnumber\u003e\n  # token to used for authenticating againts certspotter api.\n  token: \u003cstring\u003e\n\n# domains to query\ndomains:\n    # domain to request certificate issuances for\n  - domain: \u003cstring\u003e\n    # if sub domains should be included\n    include_subdomains: \u003cbool\u003e\n    \n# files to export targets to\nfiles:\n    # filename to export targets to\n  - file: \u003cstring\u003e\n    # labels to add to matching targets\n    labels:\n      \u003cstring\u003e: \u003cstring\u003e\n    # target labels to match to be included in file\n    match_re:\n      \u003cstring\u003e: \u003cregex\u003e\n```\n\nThe certspotter service discovey is intended to be used with prometheus and the\nblackbox-exporter this can be configured in prometheus as follows. A complete\nconfiguration of certspotter-sd, blackbox-exporter and prometheus can be found\nin the [example][3] folder.\n\n```yaml\n- job_name: \"blackbox:tcp\"\n   metrics_path: /probe\n   params:\n     module: [tcp]\n   file_sd_configs:\n     - files:\n         - /etc/prometheus/targets.json\n       refresh_interval: 15s\n   relabel_configs:\n     - source_labels: [__address__, __port__]\n       separator: \":\"\n       target_label: __param_target\n     - source_labels: [__param_target]\n       target_label: instance\n     - target_label: __address__\n       replacement: \"localhost:9115\"\n```\n\nAtm. configuration can't be reloaded by sending a `SIGHUP` and must be\nterminated and restarted instead.\n\n[1]: https://sslmate.com/certspotter/\n[2]: https://github.com/codecentric/certspotter-sd/releases\n[3]: https://github.com/codecentric/certspotter-sd/tree/master/example\n","funding_links":[],"categories":["Go"],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcodecentric%2Fcertspotter-sd","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fcodecentric%2Fcertspotter-sd","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcodecentric%2Fcertspotter-sd/lists"}