search

mapbox / secret-shield

Easily find secrets in files, directories, and repositories. Stop leaking secrets using git hooks.
MIT License
35 stars 13 forks source link

I should not have to globally install this module #9

Open rclark opened 4 years ago

rclark commented 4 years ago

Why isn't installing secret-shield as a dependency in my repository sufficient? What's driving the demand that I manage a global npm secret-shield installation?

vsmart commented 4 years ago

Hi @rclark, have you seen these instructions to install secret-shield in your repo? If yes what issues have you run into with this? https://github.com/mapbox/secret-shield/blob/master/docs/enabledRepositories.md#how-to-install-in-your-repository

rclark commented 4 years ago

Yes, that documentation is incomplete, because when I make a commit, the hook issues this error:

ERROR! You must have secret-shield installed and configured globally to commit to this repository. To set up secret-shield, follow these instructions: https://github.com/mapbox/secret-shield/blob/master/docs/enabledBadge.md

rreusser commented 2 years ago

We also ran into problems with projects using pre-commit:

$ pre-commit install
[ERROR] Cowardly refusing to install hooks with `core.hooksPath` set.
hint: `git config --unset-all core.hooksPath`

I had to remove secret-shield from my global git hooks.