[KED-1315] Add secret scan CircleCI step (#98)

kedro-org · Feb 10, 2020 · b0991d6 · b0991d6
1 parent c7a63a5
commit b0991d6
Show file tree

Hide file tree

Showing 4 changed files with 14 additions and 0 deletions.
diff --git a/.circleci/config.yml b/.circleci/config.yml
@@ -65,6 +65,11 @@ utils:
     command: |
       make pylint
 
+  run_secret_scan: &run_secret_scan
+    name: Run secret scan
+    command: |
+      make secret-scan
+
   run_python_tests: &run_python_tests
     name: Run Python tests
     command: make pytest
@@ -131,6 +136,7 @@ jobs:
       - run: *run_javascript_tests
       - run: *test_lib_transpilation
       - run: *run_pylint_and_flake8
+      - run: *run_secret_scan
       - run: *run_python_tests
       - run: *run_e2e_tests
       - run: *cleanup

diff --git a/Makefile b/Makefile
@@ -30,6 +30,9 @@ pylint:
 	pylint -j 0 --disable=missing-docstring,no-name-in-module package/features
 	flake8 package
 
+secret-scan:
+	trufflehog --max_depth 1 --exclude_path trufflehog-ignore.txt .
+
 version:
 	python3 tools/versioning.py $(VERSION)
 

diff --git a/package/test_requirements.txt b/package/test_requirements.txt
@@ -9,3 +9,4 @@ pytest-mock>=1.7.1,<2.0
 requests-mock>=1.6.0, <2.0
 flake8>=3.5, <4.0
 isort
+trufflehog>=2.0.99, <3.0
diff --git a/trufflehog-ignore.txt b/trufflehog-ignore.txt
@@ -0,0 +1,4 @@
+package.json
+package-lock.json
+RELEASE.md
+README.md