goscan is a simple tool to find keywords in text, binary, and archive files.

It copies files to be scanned into a temporary scratch space and recursively walks directory trees to unarchive, decompress, and scan files with a configurable list of keywords.

go get -u github.com/joelanford/goscan

goscan can use a ramdisk to dramatically increase performance for large archives and compressed files. Using a ramdisk is supported on macOS and Linux, only. Linux users will need root privileges to use a ramdisk.

By default, ramdisk scratch space is disabled. To enable it, set -scratch.ramdisk.enable=true on the command line

goscan also requires the unar command line tool

sudo yum install -y unar

sudo apt-get install -y unar

brew install unar

Usage: goscan [options] <scanfiles>
  -output string
    	Results output file ("-" for stdout) (default "-")
  -scan.context int
    	Context to capture around each hit (default 10)
  -scan.words string
    	YAML keywords file
  -scratch.dir string
    	Scratch directory for scan unarchiving
  -scratch.ramdisk.enable
    	Enable ramdisk scratch directory
  -scratch.ramdisk.mb int
    	Size of ramdisk to use as scratch space (default 4096)