trufflehog icon indicating copy to clipboard operation
trufflehog copied to clipboard

Allow skipping git commit metadata scanning

Open namratasharma-rubrik opened this issue 8 months ago • 2 comments

Description

A feature was added after https://github.com/trufflesecurity/trufflehog/issues/2683 that allows scanning for secrets in Commit messages. We have a use case where we want to skip this scan as we are adding some tracking params in our git commit messages that trufflehog is detecting as secrets.

Preferred Solution

Create a new flag like for eg --skip-metadata-scanning to skip scanning commit messages

References

https://github.com/trufflesecurity/trufflehog/issues/2683 https://github.com/trufflesecurity/trufflehog/pull/2713

namratasharma-rubrik avatar Feb 03 '25 21:02 namratasharma-rubrik