ggshield icon indicating copy to clipboard operation
ggshield copied to clipboard

Add an option to make `secret scan path` honor .gitignore files

Open agateau-gg opened this issue 1 year ago • 0 comments

Is your feature request related to a problem? Please describe.

ggshield secret scan path does not honor the content of .gitignore files. When running it at the root of a git checkout, this often causes it to scan files it should not scan, since they are not part of the repository content.

Describe the solution you'd like

secret scan path should support a --honor-gitignore or --ignore-vcs option to honor .gitignore files and related files (.git/info/exclude, $HOME/.config/git/ignore).

Regarding naming: --honor-gitignore is more explicit I think, but verbose. --ignore-vcs is used by other tools such as fd and ripgrep.

Additional context

ggshield low-level code already knows how to honor .gitignore files (including .git/info/exclude and $HOME/.config/git/ignore). We "just" need to expose the setting to the CLI.

agateau-gg avatar Nov 17 '23 15:11 agateau-gg