trufflesecurity / trufflehog

Find, verify, and analyze leaked credentials
https://trufflesecurity.com
GNU Affero General Public License v3.0
17.47k stars 1.72k forks source link

Support for skipping gitlab repositories when scanning #772

Open rndmh3ro opened 2 years ago

rndmh3ro commented 2 years ago

Community Note

Description

We want to scan our whole gitlab instance for secrets and report the findings to the owners of the repository. However we want to provide the users a way to opt out of scanning their repositories. So we'd like to have an option to skip repos by url.

Problem to be Addressed

I'd like to scan all our repositories but don't want to spam users who don't want to get their repos scanned.

Description of the Preferred Solution

An option to skip repos, e.g.:

trufflehog gitlab --token $TOKEN --endpoint=https://example.com --skip-repo https://example.com/path/to/skip/repo.git
zricethezav commented 1 year ago

Seeing as how we can skip GitHub repos, skipping GitLab repos should be an option too. I'll look into adding this feature.