5 ms·

I'm wondering if this couldn't be used as a way to confirm or search for secrets: push huge files with many "secrets", if it's rejected, then you know it has a

by Aissen 5y ago

I'm wondering if this couldn't be used as a way to confirm or search for secrets: push huge files with many "secrets", if it's rejected, then you know it has a valid one, then rince and repeat with a binary search to find the one.

eli 5y ago
Pretty sure it just checks against a pattern, doesn't actually check validity
- Aissen 5y ago
  Nice, but I was thinking ahead, for a real check that would block the commit, but using the actual secrets.
  - azinman2 5y ago
    I doubt ppl would want to give github all their actual secrets