-
Notifications
You must be signed in to change notification settings - Fork 0
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
SEC-1431-Lintly-parser-for-gitleaks #5
Conversation
c947f18
to
ac72e30
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Requesting a couple minor changes. It might be a good idea to run some combo of pylint/flake8/black to lint and format consistently.
ac72e30
to
b1d21ff
Compare
c0debdc
to
38bb9e7
Compare
38bb9e7
to
be2f6c0
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Please also edit the commit message (I dunno, may require a rebase and force push?) to be something more descriptive of the entire commit. (Using something similar to the title of this PR is fine, although it's practice around here to put the ticket number before the rest of the message -- SEC-1431 Added lintly parser for gitleaks.
or something like that.)
tests/linters_output/gitleaks.json
Outdated
"tags": "key, AWS" | ||
}, | ||
{ | ||
"line": " \"line\": \"-----BEGIN PRIVATE KEY-----\",", |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I still think it's confusing for a future maintainer of this project to use a false positive test case here.
I'm assuming you got this from running gitleaks on the current file (gitleaks.json), which is a FP, because there's no actual private key material here.
If someone had checked in a real key, the line would start with just -----BEGIN PRIVATE KEY-----
. (In other words, this entire line should just be
"line": "-----BEGIN PRIVATE KEY-----",
).
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
So you want me to change this line to -----BEGIN PRIVATE KEY-----
or add extra file with private key and then write test case around that?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Just change the line. I don't think you need to add extra tests or make any changes to the existing test.
be2f6c0
to
e809073
Compare
lol you didn't need to put dashes or hyphens in a commit message (spaces are okay! commit messages are meant for human consumption), but this is fine. |
No description provided.