Skip to content

feat: integrate gitleaks #1010

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
May 19, 2025
Merged

feat: integrate gitleaks #1010

merged 2 commits into from
May 19, 2025

Conversation

06kellyjac
Copy link
Contributor

integrate support for gitleaks checks (default off for now)
Users must make the gitleaks binary available on the PATH for git-proxy and enable via the git-proxy settings

Copy link

netlify bot commented May 16, 2025

Deploy Preview for endearing-brigadeiros-63f9d0 canceled.

Name Link
🔨 Latest commit 8a08115
🔍 Latest deploy log https://app.netlify.com/projects/endearing-brigadeiros-63f9d0/deploys/682b32532a06c90008713d95

Copy link

codecov bot commented May 16, 2025

Codecov Report

Attention: Patch coverage is 16.48352% with 76 lines in your changes missing coverage. Please review.

Project coverage is 48.09%. Comparing base (a059202) to head (8a08115).
Report is 14 commits behind head on main.

Files with missing lines Patch % Lines
src/proxy/processors/push-action/gitleaks.ts 11.62% 76 Missing ⚠️
Additional details and impacted files
@@            Coverage Diff             @@
##             main    #1010      +/-   ##
==========================================
- Coverage   49.82%   48.09%   -1.73%     
==========================================
  Files          48       49       +1     
  Lines        1724     1813      +89     
  Branches      176      196      +20     
==========================================
+ Hits          859      872      +13     
- Misses        841      917      +76     
  Partials       24       24              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Copy link
Member

@JamieSlome JamieSlome left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM! 🍰

@JamieSlome JamieSlome enabled auto-merge May 19, 2025 10:01
@JamieSlome JamieSlome disabled auto-merge May 19, 2025 10:04
@JamieSlome JamieSlome enabled auto-merge May 19, 2025 13:31
@JamieSlome JamieSlome merged commit 94ab3cf into finos:main May 19, 2025
14 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Detect the usage of common secrets and sensitive patterns (i.e. using GitLeaks)
2 participants