feat(secret-scan): Add support for exclude path file (#133)

* add support for exclude path file * add test keys for testing * add testing for ignore file * remove testing files * use globs instead of regex * restore git scan instead of filesystem * Update secret-scan.yml
getsentry · Jul 10, 2024 · fab9325 · fab9325
1 parent 11fa4e2
commit fab9325
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/.github/workflows/secret-scan.yml b/.github/workflows/secret-scan.yml
@@ -52,4 +52,8 @@ jobs:
 
       - name: Run TruffleHog scan
         run: |
-          trufflehog git file://. --only-verified --github-actions --fail
+          if [ -e .secret_scan_ignore ]; then
+            trufflehog git file://. --only-verified --github-actions --fail --exclude-paths=.secret_scan_ignore
+          else
+            trufflehog git file://. --only-verified --github-actions --fail
+          fi