IBM / detect-secrets

An enterprise friendly way of detecting and preventing secrets in code.
Apache License 2.0
74 stars 46 forks source link

--diff-branch option to allow for scans of changed files only #142

Closed nickrayjones closed 10 months ago

nickrayjones commented 11 months ago

My git component has an extremely large code base and it takes hours to scan all files in the repository. Our builds only perform incremental changes, building only the changed source files. Because of this it is only necessary to scan changed source files during the build process.

This enhancement saves hours of downtime on incremental builds only changing a few source files out of thousands.

There is also a tweak to allow detect-secrets to run on z/OS by acknowledging code 129 as a file not found code.

init.py added to tests directories to allow testing to run

in baseline_test.py, setup renamed to setup_method per the guidance https://docs.pytest.org/en/stable/deprecations.html#support-for-tests-written-for-nose