Bump zricethezav/gitleaks from v7.6.1 to v8.0.4 (super-linter#2188)

* Bump zricethezav/gitleaks from v7.6.1 to v8.0.4 Bumps zricethezav/gitleaks from v7.6.1 to v8.0.4. --- updated-dependencies: - dependency-name: zricethezav/gitleaks dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> * fixing command for after 8.x * better regex * better verbose * remove file * fixed logic Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Admiral Awkbar <admiralawkbar@github.com>
23andMe · May 6, 2022 · 92c10c3 · 92c10c3
1 parent b90f4a8
commit 92c10c3
Show file tree

Hide file tree

Showing 3 changed files with 8 additions and 4 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -19,7 +19,7 @@ FROM mvdan/shfmt:v3.4.1 as shfmt
 FROM accurics/terrascan:1.12.0 as terrascan
 FROM hadolint/hadolint:latest-alpine as dockerfile-lint
 FROM assignuser/chktex-alpine:v0.1.1 as chktex
-FROM zricethezav/gitleaks:v7.6.1 as gitleaks
+FROM zricethezav/gitleaks:v8.0.4 as gitleaks
 FROM garethr/kubeval:0.15.0 as kubeval
 FROM ghcr.io/awkbar-devops/clang-format:v1.0.2 as clang-format
 FROM scalameta/scalafmt:v3.2.1 as scalafmt

diff --git a/Dockerfile-slim b/Dockerfile-slim
@@ -25,7 +25,7 @@ FROM mvdan/shfmt:v3.4.1 as shfmt
 FROM accurics/terrascan:1.12.0 as terrascan
 FROM hadolint/hadolint:latest-alpine as dockerfile-lint
 FROM assignuser/chktex-alpine:v0.1.1 as chktex
-FROM zricethezav/gitleaks:v7.6.1 as gitleaks
+FROM zricethezav/gitleaks:v8.0.4 as gitleaks
 FROM garethr/kubeval:0.15.0 as kubeval
 FROM ghcr.io/assignuser/lintr-lib:0.3.0 as lintr-lib
 FROM ghcr.io/awkbar-devops/clang-format:v1.0.2 as clang-format

diff --git a/lib/functions/buildFileList.sh b/lib/functions/buildFileList.sh
@@ -316,8 +316,12 @@ function BuildFileList() {
     FILE_ARRAY_EDITORCONFIG+=("${FILE}")
     # jscpd also runs an all files
     FILE_ARRAY_JSCPD+=("${FILE}")
-    # GitLeaks also runs an all files
-    FILE_ARRAY_GITLEAKS+=("${FILE}")
+    # Need to make sure we dont check the secrets paterns
+    # for secrets, as it will pop!
+    if [ "${BASE_FILE}" != ".gitleaks.toml" ]; then
+      # GitLeaks also runs an all files
+      FILE_ARRAY_GITLEAKS+=("${FILE}")
+    fi
 
     #######################
     # Get the shell files #