-
https://github.com/EIDIKO/secret-pub-repo/security/secret-scanning/1
-
Currently the only reference back to GitHub is in the Identifier, but it's unclear how to get to the alert inside GitHub.
For example, a secret scanning Identifier of
"GitHubSecretScanning 1"
Sho…
-
- [ ] Create three different roles to view different alerts within GHAS (Secret Scanning role, Dependabot/Code Scanning Alerts)
-
### Description
Currently, you can only specify what branch you want _all_ of your checks to run on via the `policy-branch` input.
### Propose Solution
It would be nice if you could specify diffe…
-
### Proposed change
GitHub has a feature allowing private reporting of security vulnerabilities. This can be enabled at the organisation level for all repositories including new ones:
https://docs…
-
When running trufflehog on a local repo, I get the same output whether or not the path exists:
### Output for nonexistent path:
```
$ trufflehog --debug git file:///tmp/nonexistent.git
2024/08…
-
Initial status + link
-
Hello, I've been using this library in an API I've been building and it's worked exceptionally well so far.
One of the crates I've been using is [`securefmt`](https://crates.io/crates/securefmt) wh…
-
### Are you certain it's a bug?
- [X] Yes, it looks like a bug
### Is the issue caused by a plugin?
- [X] It is not a plugin issue
### Are you using the latest v3 release?
- [X] Yes, I'…
-
* **I'm submitting a ...**
- [ ] bug report
- [x] feature request
* **What is the current behavior?**
detect-secrets-hook gets a list of files as command line arguments.
* **What is the d…