Secret scanning (!542) · Merge requests · Iron Bank / ironbank-pipeline · GitLab

UNCLASSIFIED - NO CUI

Iron Bank will be replacing the old container signing certificate with the new container signing certificate. No additional action is required. Users can find additional information regarding the certificate rotation and container signature verification here and here.

David Freeman requested to merge secret-scanning into development Apr 15, 2021

closes #173 (closed)
Adds truffleHog3 secret scanning to feature branches of the pipeline
Failed when secret found: https://repo1.dso.mil/dsop/opensource/pipeline-test-project/ubi8/-/jobs/2757704
Succeed when secret removed via rebase: https://repo1.dso.mil/dsop/opensource/pipeline-test-project/ubi8/-/jobs/2757754

After updating the job logic I tested and it still is failing and passing as expected

Also reorganized the preflight stage directory

Edited Apr 15, 2021 by David Freeman

UNCLASSIFIED - NO CUI