Add trufflehog to scan secrets

[nmerget]

No description provided.

[mfranzke]

@nmerget What about scanning on pre-commit (additionally), as we might want to prevent any checkin of secrets prior to the commit itself?

[nmerget]

@nmerget What about scanning on pre-commit (additionally), as we might want to prevent any checkin of secrets prior to the commit itself?

Do you have a suggestion? We should use a npm package for local pre-commit

[mfranzke]

@nmerget What about scanning on pre-commit (additionally), as we might want to prevent any checkin of secrets prior to the commit itself?

Do you have a suggestion? We should use a npm package for local pre-commit

what about using the same software on the localhosts? https://github.com/trufflesecurity/truffleHog#installation

[nmerget]

@nmerget What about scanning on pre-commit (additionally), as we might want to prevent any checkin of secrets prior to the commit itself?

Do you have a suggestion? We should use a npm package for local pre-commit

sadly not :-(

All npm scanners are pretty old. Otherwise we would need docker to run some go/python scanner :(

[mfranzke]

@nmerget What about scanning on pre-commit (additionally), as we might want to prevent any checkin of secrets prior to the commit itself?

Do you have a suggestion? We should use a npm package for local pre-commit

sadly not :-(

All npm scanners are pretty old. Otherwise we would need docker to run some go/python scanner :(

brew installation sounded feasible to me … at least for the Mac users … https://github.com/trufflesecurity/truffleHog#5-brew

[nmerget]

@nmerget What about scanning on pre-commit (additionally), as we might want to prevent any checkin of secrets prior to the commit itself?

Do you have a suggestion? We should use a npm package for local pre-commit

sadly not :-(

All npm scanners are pretty old. Otherwise we would need docker to run some go/python scanner :(

brew installation sounded feasible to me … at least for the Mac users … https://github.com/trufflesecurity/truffleHog#5-brew

I think this is not a solution. We should use only npm packages or bash inside pre-commit...