trufflehog icon indicating copy to clipboard operation
trufflehog copied to clipboard

Unable to test detection with an example secret and the --no-verification flag

Open mortenson opened this issue 2 years ago • 0 comments

Community Note

  • Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
  • Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request
  • If you are interested in working on this issue or have submitted a pull request, please leave a comment

TruffleHog Version

% trufflehog --version
trufflehog 3.25.1

Trace Output

https://gist.github.com/mortenson/b1bb008641ff54938de6a146815f9a79

Expected Behavior

I should be able to use an example or dummy secret, for example an invalid AWS key, to test if trufflehog is working while using the --no-verification flag.

Actual Behavior

Trufflehog does not fail when adding an example secret.

Steps to Reproduce

git clone [email protected]:trufflesecurity/trufflehog.git
cd trufflehog
echo "AKIAIOSFODNN7EXAMPLE" > foo
git add foo
trufflehog git file://. --since-commit HEAD --no-update --no-verification --fail
# Notice that the above command does not fail as expected

Environment

  • OS: macOS
  • Version: 13.1 (22C65)

Additional Context

I wanted to test if the pre-commit example was working locally before adding trufflehog to my repo. Maybe I'm doing something wrong?

References

  • #0000

mortenson avatar Jan 13 '23 22:01 mortenson