detect-secrets
detect-secrets copied to clipboard
Yelp
An enterprise friendly way of detecting and preventing secrets in code.
We are trying to avoid disabling the plugin "keyword-detector" and use exclude-secrets option as part of the scan to exclude words that contain "secret" specifically. I have tried multiple regex...
Hi team, I am trying to lower string entropy index with the configuration below. However, it does not seem to work well. Could anyone help me with this problem? ```...
- move try-except up the stack, so we actually have a line number and not only the column - also catch IndexError (eg. if the file has fewer lines than...
Doesn't work: `{{- $password = index $split 1 }}{{- /* pragma: allowlist secret */}}` Does work: `{{- $password = index $split 1 }}{{- /* # pragma: allowlist secret */}}` This...
Hey, it's not exactly a code issue but more of a info lack. So I'm making a custom filter with ML and keyword match to reduce FPs since I'm using...
Hi all, I am using detect secrets to scan the environment when the program is running, rather than the source code of the program. In order to improve the scanning...
I updated `AzureStorageKeyDetector` to `AzureKeyDetector`. `AzureKeyDetector` supports various Azure services in addtion to Azure Storage (supported by AzureStorageKeyDetector). Here are supported Azure services: - Azure Storage - Azure SQL Database...
I disable the filter for the comparison, since the key/secret would be filtered out otherwise. Though, without the patch not every valid line inside JSON would be scanned. ``` #...
hello there please is it possible to add args of '--all-files' to the git hook config detect-secrets is skipping files with ".txt" files see here ```repos: - repo: https://github.com/Yelp/detect-secrets rev:...
