slalombuild / secureli

seCureLI is a tool that enables you to experience the delight of building products by helping you get ideas from your head into working software as frictionlessly as possible, in a reliable, secure, scalable, and observable way.
Apache License 2.0
28 stars 3 forks source link

Increase security scan to check for PII #435

Open JordoHeffernan opened 5 months ago

JordoHeffernan commented 5 months ago

As a securLi user, I want increased security to prevent me from accidentally committing PII into my maintained repo

AC

  1. SecureLi checks entire repo on first scan and all future committed code for emails a. may need to add an option for files to ignore, or auto-ignore .md files for this check?
  2. SecureLi checks entire repo on first scan and all future committed code for phone numbers
  3. SecureLi checks entire repo on first scan and all future committed code for Social security numbers

Notes

Current functionality utilizes regex for matching patterns. Feel free to continue that and/or find existing library that can accomplish this.