-
Notifications
You must be signed in to change notification settings - Fork 2.1k
Open
Labels
Description
Description
TruffleHog not always find secrets as verified, but it find it and place it as unverified in output. If you run TruffleHog as part of CI/CD automation it would be great to be able to set severity of fail. I guess at the moment it either verified or unverified.
Severity levels and some sort of configuration flag for them would help to set different levels of inspections.
Caching system can help to avoid unnecessary checks. Only check files which has been changed.
At the moment the solution to fail when unverified secrets has been found is to parse output and react on unverified findings. As bare minimum it would be really useful to have --fail-unverified or something similar.