trufflehog
trufflehog copied to clipboard
Allow skipping git commit metadata scanning
Description
A feature was added after https://github.com/trufflesecurity/trufflehog/issues/2683 that allows scanning for secrets in Commit messages. We have a use case where we want to skip this scan as we are adding some tracking params in our git commit messages that trufflehog is detecting as secrets.
Preferred Solution
Create a new flag like for eg --skip-metadata-scanning to skip scanning commit messages
References
https://github.com/trufflesecurity/trufflehog/issues/2683 https://github.com/trufflesecurity/trufflehog/pull/2713