Skip to content

Commit

Permalink
Turn gitleaks timeout error into a low vuln (#454)
Browse files Browse the repository at this point in the history
  • Loading branch information
spimpaov authored and rafaveira3 committed Jan 6, 2020
1 parent 37a07a3 commit e0bf1c4
Showing 1 changed file with 5 additions and 5 deletions.
10 changes: 5 additions & 5 deletions api/securitytest/gitleaks.go
Expand Up @@ -42,7 +42,7 @@ func analyseGitleaks(gitleaksScan *SecTestScanInfo) error {
return nil
}

// if gitleaks timeout, a warning will be generated as a nosec vuln
// if gitleaks timeout, a warning will be generated as a low vuln
gitleaksTimeout := strings.Contains(gitleaksScan.Container.COutput, "ERROR_TIMEOUT_GITLEAKS")
if gitleaksTimeout {
gitleaksScan.GitleaksTimeout = true
Expand Down Expand Up @@ -83,21 +83,21 @@ func (gitleaksScan *SecTestScanInfo) prepareGitleaksVulns() {
gitleaksVuln := types.HuskyCIVulnerability{}
gitleaksVuln.Language = "Generic"
gitleaksVuln.SecurityTool = "Gitleaks"
gitleaksVuln.Severity = "nosec"
gitleaksVuln.Severity = "low"
gitleaksVuln.Details = "It looks like your project is too big and huskyCI was not able to run Gitleaks."

gitleaksScan.Vulnerabilities.NoSecVulns = append(gitleaksScan.Vulnerabilities.NoSecVulns, gitleaksVuln)
gitleaksScan.Vulnerabilities.LowVulns = append(gitleaksScan.Vulnerabilities.LowVulns, gitleaksVuln)
return
}

if gitleaksScan.GitleaksErrorRunning {
gitleaksVuln := types.HuskyCIVulnerability{}
gitleaksVuln.Language = "Generic"
gitleaksVuln.SecurityTool = "Gitleaks"
gitleaksVuln.Severity = "nosec"
gitleaksVuln.Severity = "low"
gitleaksVuln.Details = "Internal error running Gitleaks."

gitleaksScan.Vulnerabilities.NoSecVulns = append(gitleaksScan.Vulnerabilities.NoSecVulns, gitleaksVuln)
gitleaksScan.Vulnerabilities.LowVulns = append(gitleaksScan.Vulnerabilities.LowVulns, gitleaksVuln)
return
}

Expand Down

0 comments on commit e0bf1c4

Please sign in to comment.