abose
commented
2 years ago - Detect any secrets like AWS keys, passwords/email ids Etc.
- CLI and config file support.
- Secrets scanner should be purely nodejs and not require python/other deps in this template.
- Gitignore should be honored when checking files to scan for secrets. Can use this lib: https://www.npmjs.com/package/gitignore-parser
- Builds should fail on commit & push if any secrets are detected.
- Secrets scan should be a part of pull request validation step to.
Ushmajit