JohnVonNeumann/opensorcery

Implement secrets checking via githooks and the CI.

開放

#36 建立於 2019年4月14日

 (0 則留言) (0 個反應) (0 位負責人)JavaScript (0 個分叉)auto 404
2POINTERdeveloper-productivitydevopsenhancementgood first issuehelp wantedsecurity

倉庫指標

星標
 (7 顆星)
PR 合併指標
 (PR 指標待抓取)

描述

Is your feature request related to a problem? Please describe. Secrets disclosure is a massive security hole, with a disproportionate number of breaches being a direct result of secrets being exposed.

Describe the solution you'd like

I want a simple solution that checks all code for secrets and manages the rejection of potentially dangerous code/additions. Preferably at both the client side and server side.

Describe alternatives you've considered A solution such as https://github.com/awslabs/git-secrets would suit well. I have not looked at other items. This would be great via githooks and also within the CI process.

貢獻者指南