Skip to content

Commit 499cd67

Browse files
authored
Chore: [AEA-0000] - use gitleaks for secret scanning (#2973)
use gitleaks for secret scanning
1 parent 9f4d47b commit 499cd67

3 files changed

Lines changed: 24 additions & 30 deletions

File tree

.gitallowed

Lines changed: 0 additions & 24 deletions
This file was deleted.

.gitleaksignore

Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
49ee7453e3f8aad31483888945a0af451cecca94:bruno/PSU/Pull_Request_Deployment/Apigee/Apigee_PULL_REQUEST_Notify_Callback.yml:generic-api-key:148
2+
49ee7453e3f8aad31483888945a0af451cecca94:bruno/PSU/Pull_Request_Deployment/Apigee/Apigee_PULL_REQUEST_Notify_Callback.yml:generic-api-key:198
3+
4202b41adcbac609aa626b5677dccb92c2141d14:bruno/PSU Collection/Pull Request Deployment/Apigee/Apigee PULL REQUEST Notify Callback.yml:generic-api-key:148
4+
4202b41adcbac609aa626b5677dccb92c2141d14:bruno/PSU Collection/Pull Request Deployment/Apigee/Apigee PULL REQUEST Notify Callback.yml:generic-api-key:198
5+
4c0318af471cb340e9f80f5b052bc9ffd96fc8a0:packages/nhsNotifyLambda/.jest/setEnvVars.js:generic-api-key:7
6+
c5a2eaf8199a2d63d11992703de5100f40e2441b:packages/nhsNotifyLambda/.jest/setEnvVars.js:generic-api-key:7
7+
06849808acb57396da9ee19ad49c9c7303285930:packages/nhsNotifyLambda/.jest/setEnvVars.js:generic-api-key:7
8+
2500c61930eda7dd415281cbf16f65db40afa29d:SAMtemplates/functions/main.yaml:generic-api-key:392
9+
0f940ea336b24c2d41a6612789f9263ff976a4b0:packages/nhsNotifyLambda/src/utils.ts:generic-api-key:17
10+
09519c4f2eac4d0275e645ff698ff095e0c8f607:packages/checkPrescriptionStatusUpdates/tests/testHander.test.ts:generic-api-key:67
11+
65004a5340565126d2309b28e4a2ffc49ff89216:packages/checkPrescriptionStatusUpdates/tests/testHander.test.ts:generic-api-key:67
12+
036ce12776ece652688e374c169d25cfb0c32be6:packages/checkPrescriptionStatusUpdates/tests/testHander.test.ts:generic-api-key:80
13+
036ce12776ece652688e374c169d25cfb0c32be6:packages/checkPrescriptionStatusUpdates/tests/testDynamoDBclient.test.ts:generic-api-key:136
14+
036ce12776ece652688e374c169d25cfb0c32be6:packages/checkPrescriptionStatusUpdates/tests/testDynamoDBclient.test.ts:generic-api-key:185
15+
8501c6774eaa45acf47777dc16233cda3cdff73f:packages/checkPrescriptionStatusUpdates/tests/testHander.test.ts:generic-api-key:119
16+
8501c6774eaa45acf47777dc16233cda3cdff73f:packages/checkPrescriptionStatusUpdates/tests/testDynamoDBclient.test.ts:generic-api-key:136
17+
8501c6774eaa45acf47777dc16233cda3cdff73f:packages/checkPrescriptionStatusUpdates/tests/testDynamoDBclient.test.ts:generic-api-key:185
18+
13c3d6d3754723fa2fa2fa47deac58d84844a285:packages/checkPrescriptionStatusUpdates/tests/testDynamoDBclient.test.ts:generic-api-key:131
19+
13c3d6d3754723fa2fa2fa47deac58d84844a285:packages/checkPrescriptionStatusUpdates/tests/testDynamoDBclient.test.ts:generic-api-key:176
20+
796fda23a4f8ab9c2100d414e90ba7a9390ff287:packages/specification/eps-prescription-status-update-api.yaml:generic-api-key:6

.pre-commit-config.yaml

Lines changed: 4 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -179,15 +179,13 @@ repos:
179179
types_or: [sh, shell]
180180
pass_filenames: false
181181

182-
- repo: local
183-
hooks:
184-
- id: git-secrets
185-
name: Git Secrets
186-
description: git-secrets scans commits, commit messages, and --no-ff merges to prevent adding secrets into your git repositories.
182+
- id: gitleaks
183+
name: Git Leaks
184+
description: gitleaks scans commits, commit messages, and --no-ff merges to prevent adding secrets into your git repositories.
187185
entry: bash
188186
args:
189187
- -c
190-
- 'git-secrets --pre_commit_hook'
188+
- "gitleaks git --pre-commit --redact --staged --verbose"
191189
language: system
192190
fail_fast: true
193191
default_stages: [pre-commit]

0 commit comments

Comments
 (0)