slalombuild / secureli

seCureLI is a tool that enables you to experience the delight of building products by helping you get ideas from your head into working software as frictionlessly as possible, in a reliable, secure, scalable, and observable way.
Apache License 2.0
29 stars 3 forks source link

Automate the test data creation for the language validation test #539

Open blonienc opened 2 months ago

blonienc commented 2 months ago

Description As a dev on the seCureLI team, after completing the build pipeline to check the tool against known ‘bad state’ repos, there is some fast follow up work that needs to be completed.

Technical Details

Will require finding, or creating git repos that the pipeline can access that have secrets embedded in them. Create repo as part of the Secure Build project Should only cover detect-secrets errors Acceptance criteria _- Repo identified or created with the supporting language with 1+ secrets saved to it (fake secrets, of course)

When the tool runs and successfully throws and error (expected behavior) the build does not fail. If the tool runs and does NOT throw an error (unexpected behavior) the build fails, as the tool did not properly detect the error._ Pipeline tasks need to be created for each of our supported languages:

Java Terraform TypeScript JavaScript Python Kotlin Go CloudFormation .NET Core C# Swift