tartufo
tartufo copied to clipboard
godaddy
Searches through git repositories for high entropy strings and secrets, digging deep into commit history
## 🐛 Bug Report With an empty repository, `tartufo pre-commit` raises an exception. `tartufo scan-local-repo` does not raise an exception. ## To Reproduce ``` $ git init test2 Initialized empty...
No feature parity in detection between pre-commit and scan-local-repo for tartufo v3, contrary to v2
## 🐛 Bug Report My expectation is that pre-commit on a given commit and scan-local-repo just after the commit is added returns the same results. If `pre-commit` says "all clear",...
To help us get this pull request reviewed and merged quickly, please be sure to include the following items: * [ ] Tests (if applicable) * [ ] Documentation (if...
## 🐛 Bug Report Tartufo does not scan files with alternatives encodings, such as UTF-16 LE. This is important because (and I discovered this accidentally because) Powershell converts all standard...
## 🐛 Bug Report What tartufo reports as "matched_string" seems to be the blob of text coming out of `git diff`, which includes as prefix `+` or `-` as it...
## Feature Request @jwilhelm-godaddy As discussed. ## Is your feature request related to a problem? Please describe. If I have a repository that contains a `tartufo.toml` such as below. ```...
## 🐛 Bug Report Values like below are being flagged as high entropy findings when they shouldn't. ``` policy/service-role/AWSLambdaVPCAccessExecutionRole b/Standards-Best-Practices/Speed-of-Delivery/TEMPLATE ``` ## Expected Behavior Values should not be flagged as...
## Feature Request ## Is your feature request related to a problem? Please describe. The current `--since-commit` option is not the most intuitive, and does not always work as expected....
## Feature Request ## Is your feature request related to a problem? Please describe. Upgrade to 3.0 has caused tedious configuration changes. ## Describe the solution you'd like Would love...
## Feature Request ## Is your feature request related to a problem? Please describe. We are using `tartufo` in a multi stage docker build, there are two problems with this:...
