Brad Larsen
Brad Larsen
I've heard it would also be useful to have an option to skip digging into Git history altogether. Noting that here.
Another GitHub Action that uses SARIF to share its findings: https://github.com/redhat-plumbers-in-action/differential-shellcheck
@bpsizemore That's great! Thanks for the pointer; I will take a closer look at what you've built. Is this GitHub integration something you have any interest in incorporating upstream, or...
@bpsizemore thanks for the pointer about GitHub Actions constraints — I wasn't aware of those restrictions. Longer-term I am interested in making a GitHub Actions such as what you've written...
Yes, good idea! It would be more user-friendly to give meaningful ETAs and show current scan rate.
Longer-term, I've been thinking about switching away from Indicatif entirely and using something lighter weight, like maybe [`status_line`](https://docs.rs/status-line/latest/status_line/index.html). I had noticed earlier on in the development of Nosey Parker that...
There is also an issue now with an interaction between the `log`, `tracing`, and `indicatif` crates: if a progress bar is active, any log messages will mess up how it...
Also longer-term, I think Nosey Parker will need to move away from its current scanning operation of (1) enumerating inputs to scan to determine progress bar maximum and then (2)...
I thought I had fixed this issue in c43334c066aa9d048ab465473c439baf5ec5f9d8, but it turns out I did not. I manually re-ran the `Release Artifacts` workflow, and its multi-architecture Docker image still comes...
The failures were sporadically seen in GitHub Actions jobs as well. For example: - https://github.com/trufflesecurity/trufflehog/actions/runs/17478249783/job/49643183088 - https://github.com/trufflesecurity/trufflehog/actions/runs/17459343592/job/49580167352 - https://github.com/trufflesecurity/trufflehog/actions/runs/17459412883/job/49580376149 - https://github.com/trufflesecurity/trufflehog/actions/runs/17466455637/job/49603364126