detect-secrets icon indicating copy to clipboard operation
detect-secrets copied to clipboard

How to set timeout in my scanner?

Open rafaelsilvaa10 opened this issue 4 years ago • 5 comments

hello,

I'm having problems scanning a repository, it's taking too long.

detect-secrets scan . --exclude-lines .*: parameterSecurity:/.* --exclude-lines .*: parameter:/.* --exclude-files=package-lock.json

there are scans that are taking 10hrs another 1min ... is it due to the regexp?

However is there any parameter --timeout in the cli?

thanks

rafaelsilvaa10 avatar Mar 18 '21 14:03 rafaelsilvaa10

What version are you running?

domanchi avatar Mar 18 '21 15:03 domanchi

1.0.3

rafaelsilvaa10 avatar Mar 18 '21 16:03 rafaelsilvaa10

Probably the best way to debug whether it's a specific file is by doing chunks at a time, and enabling debug logs with -vv. I know there's a performance issue on master, but fixes are ready to be merged, and will go out in the next minor version bump.

If you're not running on master, do let us know if you find the performance issue, and we may be able to improve it for others.

domanchi avatar Mar 18 '21 16:03 domanchi

Probably the best way to debug whether it's a specific file is by doing chunks at a time, and enabling debug logs with -vv. I know there's a performance issue on master, but fixes are ready to be merged, and will go out in the next minor version bump.

If you're not running on master, do let us know if you find the performance issue, and we may be able to improve it for others.

How to scan in verbose mode?

detect-secrets: error: unrecognized arguments: -vv

Scan runs forever. Tested on multiple systems. Version 1.1.0.

UPD:

Latest version (master) is running detect-secrets scan --baseline .secrets.baseline forever too.

simon-liebehenschel avatar Oct 18 '21 18:10 simon-liebehenschel

@AIGeneratedUsername To scan in verbose mode try detect-secrets -vv scan

jpdakran avatar Jun 24 '22 20:06 jpdakran

We’re going to close this issue as it hasn’t received any update in a very long time. Feel free to re-open it if you think it’s still relevant.

lorenzodb1 avatar May 16 '24 17:05 lorenzodb1