detect-secrets icon indicating copy to clipboard operation
detect-secrets copied to clipboard

An enterprise friendly way of detecting and preventing secrets in code.

Results 130 detect-secrets issues
Sort by recently updated
recently updated
newest added

* **I'm submitting a ...** - [ ] bug report - [X] feature request * **What is the current behavior?** Doesn't seem to pick up on auth tokens in npmrc...

help wanted
triaged
request

From past 15 days, we are getting below error while using detect secret scan tool. Earlier it was working fine for me. command - `detect-secrets scan --force-use-all-plugins --all-files $(System.DefaultWorkingDirectory)/repo-name >...

* **I'm submitting a ...** - [x] bug report - [ ] feature request * **What is the current behavior?** Secrets are not detected in (docker compose) yaml files when...

false negatives
pending

* **Please check if the PR fulfills these requirements** - [x] Tests for the changes have been added - [ ] Docs have been added / updated (which one?) -...

* **I'm submitting a ...** - [ x] bug report - [ ] feature request Currently I have installed pre-commit with pip . If I do an audit it works...

needs more info

* **I'm submitting a ...** - [x] bug report - [ ] feature request * **What is the current behavior?** If I open an new Jupyter Notebook (in JupyterLab 4.0.9)...

* **I'm submitting a ...** - [x] bug report - [ ] feature request * **What is the current behavior?** The current algorithm is not able to detect secrets with...

help wanted
triaged
enhancement

check for redis.conf, get more information from https://redis.io/docs/manual/config/

Detect secret scan identified the below strings as base 64 high entropy strings. These are false positives and the plugin needs improvement. callFunctionCheckIfDataAlreadyExistsPerpetualSubinventory recallNoticesRecallBusinessUnits-validation-group-1297083594-1 assignVariablesOjTabBar1482653721SelectedItem How to take care of...

pending

If the secret written into a file at multiple locations, only the first one being identified by detect-secrets. Remaining instances are not getting reported by detect-secrets. Example code in demo.txt...

triaged
enhancement