Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: add trufflehog to ci and precommit #22

Merged
merged 5 commits into from
Oct 16, 2024

Conversation

sariola
Copy link
Collaborator

@sariola sariola commented Oct 16, 2024

Trufflehog

Adding trufflehog to expose secrets that might creep into the codebase before they can hit commit or pushed code

https://trufflesecurity.com/trufflehog

image

Usage

Automatically will be used as part of the .pre-commit-config.yaml and the pre-commit checks

  - repo: https://github.com/trufflesecurity/trufflehog
    rev: v3.82.6
    hooks:
      - id: trufflehog
        name: TruffleHog
        description: Detect secrets in your data with TruffleHog.
        entry: trufflehog git file://. --only-verified --no-update --fail --exclude-paths=.truffleignore
        language: golang

Copy link

codecov bot commented Oct 16, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

✅ All tests successful. No failed tests found.

@sariola sariola self-assigned this Oct 16, 2024
@bergr7
Copy link
Contributor

bergr7 commented Oct 16, 2024

@sariola Should we add the prerequisites to the dev section in the README?

@sariola
Copy link
Collaborator Author

sariola commented Oct 16, 2024

Improved by removing the .truffleignore file and adding the .venv glob to the command in both CI and pre-commit file.

@sariola sariola merged commit b231191 into main Oct 16, 2024
10 of 11 checks passed
@sariola sariola deleted the feat/trufflehog-precommit-and-ci branch October 16, 2024 14:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants