-
Notifications
You must be signed in to change notification settings - Fork 89
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
docs: update trg-8-03.md, introduce TruffleHog #950
Conversation
NOTE: Please do not merge this PR until the August release |
@RoKrish14 you could have placed it as a draft then |
@eclipse-tractusx/automotive-tractusx-committers please review |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Please reformat table (accept suggestion). Rest is great, thanks!
docs/release/trg-8/trg-8-03.md
Outdated
uses: actions/checkout@v3 | ||
with: | ||
fetch-depth: 0 # Ensure full clone for pull request workflows | ||
ref: ${{ github.head_ref }} # Fetch specific branch/commit for pull requests |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
this gives error when the PR is opened from a fork (example), it can be removed, as checkout
automatically picks up the PR's branch
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Hi @ndr-brt: Yes, you are right, thanks for notifying. I have made the changes.
@RoKrish14 are you still integrating review comments? |
@RoKrish14 Are you still working on this issue? I think we have a consensus on how we want to proceed here. Please get back by the end of next week, otherwise we would create a new PR for this topics. Thank you! |
Co-authored-by: Tom Meyer <[email protected]>
Co-authored-by: ndr_brt <[email protected]>
@evegufy and @danielmiehle : Apologies for the delay as I was on vacation. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM, thanks for the updates!
Description
This PR introduces TruffleHog as a new open source tool for secret scanning to be used alongside native Github Secret scanning. This is being enforced as a replacement to the existing GitGuardian (commercial) tool.
Example workflow:
Please note: The TRG checks continues for 24.08 under GitGuardian for secret scanning.
The teams who have already implemented TruffleHog, can also be considered for the TRG checks.
NOTE: Please do not merge this PR until the August release
Pre-review checks
Please ensure to do as many of the following checks as possible, before asking for committer review: