search

Yelp / detect-secrets-server

Apache License 2.0
108 stars 34 forks source link

Is there a way to scan entire commit history for secrets? #61

Closed chriswalz closed 4 years ago

chriswalz commented 4 years ago

I know generally speaking it's better to use the preventative methodology, but sometimes you need to scan the entire commit history.

Is this possible right now?

KevinHock commented 4 years ago

Not right right, detect-secrets package doesn’t do that.

One could make a package that calls detect-secrets to do this, if you wanted to. Using the same function that detect-secrets-server code uses.

First by Copy/paste/cleanup Or rewrite the truffleHog Code that does this.

chriswalz commented 4 years ago

Thanks for the quick response. I'll play around with it