opendevstack / opendevstack/ods-core
Add security scan for commits in BitBucket
Nobody has claimed this yet.
- Dominant language
- Shell
- Stars
- 53
- Forks
- 34
- Avg merge
- 3h 26m
- Merged PRs (30d)
- 1
Description
It would be helpful to scan commits in BitBucket for strings such as URLs and passwords to give users peace of mind before they push this code to GitHub to contribute to OpenDevStack.
Possible solutions:
- Manual instructions (displayed in PR?)
- Pre-receive hook that searches for strings, e.g. similar to https://github.com/pbaranchikov/stash-eol-check
- Jenkins build that searches for strings
- ... ?
FYI @ManuelFeller @maksymmaksym @clemensutschig @gerardcl
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
No files, tests, or entry points are named. Start by reviewing the listed alternatives—manual instructions, a pre-receive hook, or a Jenkins build—and clarify which Bitbucket commit flow should be covered. Done means an agreed mechanism scans for strings such as URLs and passwords before code is pushed to GitHub.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- git, github
- Domain
- devops, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100