Fix trufflehog issues
This template is ONLY used for reporting bugs. New feature request or pipeline enhancement issues should use the other template options for issue submission.
Current Behavior
Several projects are having issues when running the Trufflehog job in the pipeline.
Live Examples
-
https://repo1.dso.mil/dsop/opensource/fluentd/fluentd/-/jobs/3189469
- Trufflehog is searching against the entire history rather than looking for secrets from a diff in commits between development and master.
-
https://repo1.dso.mil/dsop/virtualitics/odin/odin_app/-/jobs/3250302
- The remediation method we recommended for removing these findings didn't work. Need to research the best way to remediate these findings and write some documentation for it.
Expected Behavior
Trufflehog should perform as expected and we should have a remediation method for cleaning up git history.
Possible Solution
Use git-filter-repo for remediation and increase the number of commits fetched in the pipeline.
Edited by Kenneth Maguire