search

hawkeyesec / scanner-cli

A project security/vulnerability/risk scanning tool
Other
359 stars 89 forks source link

file-secrets module - configurable regex patterns #115

Open willgarcia opened 5 years ago

willgarcia commented 5 years ago

Issue Template

Description

Secrets have different forms in code depending on the language or on custom configurations.

It would be good to be able to supply a list of patterns to use during secret detection in replacement or addition to the existing default patterns found in:

https://github.com/hawkeyesec/scanner-cli/blob/master/lib/modules/files-secrets/data.js

Feature Template

As a developer I want to customise the patterns used for secret detection via CLI option or plugin customisation in the .hawkeyerc file So that I can exclude default patterns, or add patterns that are relevant to my code base.

felixhammerl commented 5 years ago

i really like this idea of people being able to bring their own definitions. also, it would tremendously improve the usefulness of this module.