`--no-verify` option doesn't exist
- Dominant language
- Shell
- Stars
- 13.4k
- Forks
- 1.3k
- PR merge metrics
- No merged PRs in 30d
Description
When a scan is run and a file matching a pattern is found, the output includes the [following statement](https://github.com/awslabs/git-secrets/blob/c11c229a8eebb3545e5fd3bab4e8aa55a7f19383/git-secrets#L160):
Use --no-verify if this is a one-time false positive
However, the `--no-verify` option doesn't exist, but it sounds like a nice feature.
Consider adding it or updating the output statement?
Contributor guide
Research direction
Start with the git-secrets script at the linked location around line 160 and inspect how the scan reports a matching pattern. Determine whether the intended resolution is to support --no-verify or correct the message, then verify that the resulting command-line behavior and output match the chosen resolution.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- shell
- Domain
- cli, security
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100