Mike Dalessio
7f46063c25
- `bin/setup` installs gitleaks - add `gitleaks dir` command to CI - configure gitleaks to ignore tmp, log, and encrypted files - tag existing false positives with `gitleaks:allow` - add historical false positives to the ignore list
15 lines
338 B
Bash
Executable File
15 lines
338 B
Bash
Executable File
#!/usr/bin/env bash
|
|
|
|
if ! which gitleaks > /dev/null 2>&1 ; then
|
|
echo "gitleaks is not installed, please install it first" 1>&2
|
|
exit 1
|
|
fi
|
|
|
|
mkdir -p tmp
|
|
if ! gitleaks dir --redact=50 --report-path tmp/gitleaks-report.json ; then
|
|
echo "gitleaks found potential secrets, please check tmp/gitleaks-report.json" 1>&2
|
|
exit 1
|
|
fi
|
|
|
|
exit 0
|