4 ms·

I wish hosted GitHub made pre-push hooks available to the public. Would make this a much easier problem with free scanning tools like Trufflehog. Or alternativ

I wish hosted GitHub made pre-push hooks available to the public. Would make this a much easier problem with free scanning tools like Trufflehog. Or alternatively, if GitHub Secret Scanning was available to all public repos, instead of requiring a (very) expensive GitHub Advanced Security subscription. But I understand, they need to make money somehow.

lumberjack24 4y ago
In the meantime, try ggshield cli https://github.com/GitGuardian/ggshield https://github.com/GitGuardian/ggshield
- dinvlad 4y ago
  Nah thanks, I'm already running Trufflehog for free on all of our multiple orgs' thousands of repos. I think we would consider GG if its pricing was acceptable for non-profits though.
  - mcdwayne 4y ago
    FYI - GitGuardian is free for individuals and teams smaller than 25
    - dinvlad 4y ago
      As told earlier, we have thousands of repos. And our teams are thousands of users on GH.
greysteil 4y ago
(GitHub PM here.) The Advanced Security secret scanning experience is coming to public repos (for free, obviously)! Give us a few more months - we have a little more work to do scaling it up
- dinvlad 4y ago
  Awesome, thanks for the heads-up! We will definitely look forward to it, either to replace or enhance our current in-house solution.