valaydave / tell-me-your-secrets Goto Github PK

We can create a pre-commit hook for this project. Will be very useful to avoid leaking secrets at the time of code commits.

Another cool feature for this project would be some entropy based scanning like how projects like https://github.com/dxa4481/truffleHog enable.

I noticed that this script returns first issue identified in a file rather than them all.

Would you be open to changing the behaviour to return all?

I can implement the change 👍🏼

Unfortunately I cannot do it as I am not the repo owner, perhaps there is a way to add me as a collaborater on Codacy?

Would be nice to have the badges as flare on the README :)

Should the next release be 2.0 since we have dropped support for Python 3.4 and 3.5. Technically they were broken before it seems but this would make it semantically versioned as such.

It would be neat to leverage Github releases when releasing new code to be notified when new releases happen.

Could leverage Github Actions to automatically push to pipy too.

Happy to help out on this one.

Hi The script is awesome, but i would like to know how to print the out put of the finding. It says there is password leak in a file but what is the value which it has found is not printed can you advice on it

Just noticed that there is a bug in the exit code logic.

• Returns 1 when no errors found with or without the -e flag

I can take a look when I have some time...

Doens't seem to affect master only on latest packaged

Print version under -h and potentially --version

Would you be interested in setting up Codacy to help improve the quality of this project?

It can report on various quality, security, aspects whilst also feeding it coverage data from the tests that I have started in #8

I can help set it up if you want.

Would it make sense for this tool to return non-zero on failure or provide a flag to do this?

This would allow for easily integration on CI to fail a build for example if something is found.