#gitops - July 2021

gitopsArchived
2 messages

Discuss continuous delivery of infrastructure
Archive: https://archive.sweetops.com/gitops/

Mazin Ahmed
Mazin Ahmedover 5 years ago
Question: How do you use Git pre-hooks for identifying secrets on organization-level? I'm looking for ideas to detect sensitive commits before it's committed and pushed to Github. Any ideas how would you approach this on org level?
sheldonh
sheldonhover 5 years ago(edited)
@Mazin Ahmed Right now I'm just using lefthook and setting up a gitleaks hook to run on precommit and pre-push. It's not perfect. I've not centralized anything. You can use plugins in whatever CI tool you use to do more widescale work, but for now it's a way I've taken to get a small step towards quick code checks and pushing folks away from even dev certs and keys in the repos 🙂