secret-magpie-cli icon indicating copy to clipboard operation
secret-magpie-cli copied to clipboard

Published 20 hours ago • verified publisher icon punk-security

Allow limiting scanning to specific repos within an organisation

Open alexbrozych opened this issue 2 years ago • 1 comments

alexbrozych avatar Jan 17 '23 14:01 alexbrozych

This needs revisiting. #54

I'm not sure I like providing a file with URLs in it and then matching it exactly.

  1. what is the url, does it have the .git bit on the end? Are we case sensitive?

  2. we are only scanning one org, so I reckon the repo names will always be unique. Let's just filter based on repo name?

  3. I don't like feeding it a file. The tool runs almost always in docker and feeding it a file is an additional pain in the arse. Better to have a comma separated list of repo names on the command line

We should take a comma separated list to two flags, --ignore-repos and --only-repos. They should just be repo names, not urls. We should be case sensitive, and advise the users this on the flag help.

SimonGurney avatar Jan 18 '23 22:01 SimonGurney