github.com/IBM-Cloud/bluemix-go@v0.0.0-20241117121028-a3be206688b3/.pre-commit-config.yaml (about)

     1  # This is an example configuration to enable detect-secrets in the pre-commit hook.
     2  # Add this file to the root folder of your repository.
     3  #
     4  # Read pre-commit hook framework https://pre-commit.com/ for more details about the structure of config yaml file and how git pre-commit would invoke each hook.
     5  #
     6  # This line indicates we will use the hook from ibm/detect-secrets to run scan during committing phase.
     7  # Whitewater/whitewater-detect-secrets would sync code to ibm/detect-secrets upon merge.
     8  repos:
     9  - repo: https://github.com/ibm/detect-secrets
    10    # If you desire to use a specific version of detect-secrets, you can replace `master` with other git revisions such as branch, tag or commit sha.
    11    # You are encouraged to use static refs such as tags, instead of branch name
    12    #
    13    # Running "pre-commit autoupdate" would automatically updates rev to latest tag
    14    rev: 0.13.1+ibm.46.dss
    15    hooks:
    16      - id: detect-secrets # pragma: whitelist secret
    17        # Add options for detect-secrets-hook binary. You can run `detect-secrets-hook --help` to list out all possible options.
    18        # You may also run `pre-commit run detect-secrets` to preview the scan result.
    19        # when "--baseline" without "--use-all-plugins", pre-commit scan with just plugins in baseline file
    20        # when "--baseline" with "--use-all-plugins", pre-commit scan with all available plugins
    21        # add "--fail-on-non-audited" to fail pre-commit for unaudited potential secrets
    22        args: [--baseline, .secrets.baseline, --use-all-plugins ]
    23  
    24