not that fast.. show benchmarks

sirwart / ripsecrets

A command-line tool to prevent committing secret keys into your source code

MIT License

800 stars 24 forks source link

not that fast.. show benchmarks #84

Closed jaredxx1 closed 7 months ago

jaredxx1 commented 7 months ago

it's very slow compared to rg (with all the extras removed) - I only checked for 3 piped rgxs

lafrenierejm commented 7 months ago

Any chance you could provide a sample repository and the regular expressions you benchmarked?

sirwart commented 7 months ago

You can see how I tested the performance here: https://github.com/sirwart/ripsecrets?tab=readme-ov-file#performance. Even though the tool is built using rg, it's still running quite a large regex on the code being scanned. It should be compared to other secret scanning tools.