Skip to content

Commit 960ea60

Browse files
committed
remove git secrets
1 parent 445e7d2 commit 960ea60

2 files changed

Lines changed: 1 addition & 16 deletions

File tree

src/base/.devcontainer/Mk/check.mk

Lines changed: 1 addition & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -84,11 +84,7 @@ actionlint:
8484
actionlint
8585

8686
secret-scan:
87-
@if [ -f .gitallowed ]; then \
88-
git-secrets --scan-history .; \
89-
else \
90-
gitleaks -v --redact git; \
91-
fi
87+
gitleaks -v --redact git
9288

9389
guard-%:
9490
@ if [ "${${*}}" = "" ]; then \

src/base/.devcontainer/scripts/root_install.sh

Lines changed: 0 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -45,17 +45,6 @@ VERSION="${DIRENV_VERSION}" "${SCRIPTS_DIR}/${CONTAINER_NAME}/install_direnv.sh"
4545
# install yq
4646
VERSION="${YQ_VERSION}" "${SCRIPTS_DIR}/${CONTAINER_NAME}/install_yq.sh"
4747

48-
# install gitsecrets
49-
# this should be removed once we have migrated all repos to gitleaks
50-
git clone https://github.com/awslabs/git-secrets.git /tmp/git-secrets
51-
cd /tmp/git-secrets
52-
make install
53-
cd
54-
rm -rf /tmp/git-secrets
55-
mkdir -p /usr/share/secrets-scanner
56-
chmod 755 /usr/share/secrets-scanner
57-
curl -L https://raw.githubusercontent.com/NHSDigital/software-engineering-quality-framework/main/tools/nhsd-git-secrets/nhsd-rules-deny.txt -o /usr/share/secrets-scanner/nhsd-rules-deny.txt
58-
5948
# get cfn-guard ruleset
6049
tmp_dir="$(mktemp -d)"
6150
trap 'rm -rf "${tmp_dir}"' EXIT

0 commit comments

Comments
 (0)