awslabs / awslabs/git-secrets

`--no-verify` option doesn't exist

Open
#96 1 comment 0 reactions 0 assignees View on GitHub
aged
Dominant language
Shell
Stars
13.4k
Forks
1.3k
PR merge metrics
No merged PRs in 30d

Description

When a scan is run and a file matching a pattern is found, the output includes the [following statement](https://github.com/awslabs/git-secrets/blob/c11c229a8eebb3545e5fd3bab4e8aa55a7f19383/git-secrets#L160):

Use --no-verify if this is a one-time false positive

However, the `--no-verify` option doesn't exist, but it sounds like a nice feature.
Consider adding it or updating the output statement?

Contributor guide

Open the contributing guide

Research direction

Start with the git-secrets script at the linked location around line 160 and inspect how the scan reports a matching pattern. Determine whether the intended resolution is to support --no-verify or correct the message, then verify that the resulting command-line behavior and output match the chosen resolution.

Written by the indexing model from the issue text.

Assessment

Tech stack
shell
Domain
cli, security
Issue type
Bug
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.