From 10a849336ce050500280eec7c69aa7fdd198c346 Mon Sep 17 00:00:00 2001 From: Kevin Hock Date: Fri, 6 Jul 2018 15:54:22 -0700 Subject: [PATCH] Add detect-secrets hook & baseline to every public repo --- .pre-commit-config.yaml | 6 ++++++ .secrets.baseline | 27 +++++++++++++++++++++++++++ 2 files changed, 33 insertions(+) create mode 100644 .secrets.baseline diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index cf58a0ac6..95437e1bf 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -17,3 +17,9 @@ repos: sha: v0.3.5 hooks: - id: reorder-python-imports +- repo: git://github.com/Yelp/detect-secrets + sha: 0.9.1 + hooks: + - id: detect-secrets + args: ['--baseline', '.secrets.baseline'] + exclude: .*tests/.*|.*yelp/testing/.*|\.pre-commit-config\.yaml diff --git a/.secrets.baseline b/.secrets.baseline new file mode 100644 index 000000000..b4405a48d --- /dev/null +++ b/.secrets.baseline @@ -0,0 +1,27 @@ +{ + "exclude_regex": ".*tests/.*|.*yelp/testing/.*|\\.pre-commit-config\\.yaml", + "generated_at": "2018-07-06T22:54:22Z", + "plugins_used": [ + { + "base64_limit": 4.5, + "name": "Base64HighEntropyString" + }, + { + "hex_limit": 3, + "name": "HexHighEntropyString" + }, + { + "name": "PrivateKeyDetector" + } + ], + "results": { + ".travis.yml": [ + { + "hashed_secret": "4f7a1ea04dafcbfee994ee1d08857b8aaedf8065", + "line_number": 14, + "type": "Base64 High Entropy String" + } + ] + }, + "version": "0.9.1" +}