Skip to content

Severity level flags and configs #4533

@vm-mscs-mmxxiv

Description

@vm-mscs-mmxxiv

Description

TruffleHog not always find secrets as verified, but it find it and place it as unverified in output. If you run TruffleHog as part of CI/CD automation it would be great to be able to set severity of fail. I guess at the moment it either verified or unverified.

Severity levels and some sort of configuration flag for them would help to set different levels of inspections.

Caching system can help to avoid unnecessary checks. Only check files which has been changed.

At the moment the solution to fail when unverified secrets has been found is to parse output and react on unverified findings. As bare minimum it would be really useful to have --fail-unverified or something similar.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions