Skip to content
This repository has been archived by the owner on Nov 4, 2024. It is now read-only.

Commit

Permalink
created detect-secrets baseline and added call to build locally script
Browse files Browse the repository at this point in the history
Signed-off-by: Savvas Kyriacou <[email protected]>
  • Loading branch information
KirbyKatcher committed May 31, 2024
1 parent acc8490 commit 4104b40
Show file tree
Hide file tree
Showing 2 changed files with 7 additions and 6 deletions.
4 changes: 2 additions & 2 deletions .secrets.baseline
Original file line number Diff line number Diff line change
@@ -1,9 +1,9 @@
{
"exclude": {
"files": ".*/src/test/.*|.*/.secrets.baseline$",
"files": ".*/src/test/.*|^.secrets.baseline$",
"lines": null
},
"generated_at": "2024-05-30T15:51:49Z",
"generated_at": "2024-05-31T12:57:28Z",
"plugins_used": [
{
"name": "AWSKeyDetector"
Expand Down
9 changes: 5 additions & 4 deletions build-locally.sh
Original file line number Diff line number Diff line change
Expand Up @@ -191,7 +191,7 @@ function build_with_gradle {
info "Using command: $cmd"
$cmd 2>&1 > ${log_file}
rc=$?
check_exit_code 0 "Failed to build ${project} with gradle."
check_exit_code $rc "Failed to build ${project} with gradle."
}

function displayCouchDbCodeCoverage {
Expand All @@ -209,15 +209,16 @@ function displayCouchDbCodeCoverage {

function check_secrets {
h2 "updating secrets baseline"
detect-secrets scan --exclude-files '.*/src/test/.*' --update ${BASEDIR}/.secrets.baseline
cd ${BASEDIR}
detect-secrets scan --exclude-files '.*/src/test/.*' --update .secrets.baseline
rc=$?
check_exit_code $rc "Failed to run detect-secrets. Please check it is installed properly"
success "updated secrets file"

h2 "running audit for secrets"
detect-secrets audit ${BASEDIR}/.secrets.baseline
detect-secrets audit .secrets.baseline
rc=$?
check_exit_code 0 "Failed to audit detect-secrets."
check_exit_code $rc "Failed to audit detect-secrets."
success "secrets audit complete"
}

Expand Down

0 comments on commit 4104b40

Please sign in to comment.