Skip to content

[SCB-Bot] Upgraded gitleaks from v8.6.1 to v8.8.7#1207

Closed
secureCodeBoxBot wants to merge 1 commit intomainfrom
dependencies/upgrading-gitleaks-to-v8.8.7
Closed

[SCB-Bot] Upgraded gitleaks from v8.6.1 to v8.8.7#1207
secureCodeBoxBot wants to merge 1 commit intomainfrom
dependencies/upgrading-gitleaks-to-v8.8.7

Conversation

@secureCodeBoxBot
Copy link
Copy Markdown
Contributor

@secureCodeBoxBot secureCodeBoxBot commented Jun 3, 2022

This is an automated Pull Request by the SCB-Bot. It upgrades gitleaks from v8.6.1 to v8.8.7

Release changes : here

@secureCodeBoxBot
Upgrading gitleaks from v8.6.1 to v8.8.7
201e3bb 
Signed-off-by: secureCodeBoxBot <securecodebox@iteratec.com>
@secureCodeBoxBot secureCodeBoxBot added dependencies Pull requests that update a dependency file scanner Implement or update a security scanner labels Jun 3, 2022
@github-actions
Copy link
Copy Markdown

github-actions bot commented Jun 3, 2022 •
edited
Loading

MegaLinter status: ✅ SUCCESS

Descriptor Linter Files Fixed Errors Elapsed time
✅ GIT git_diff yes no 0.11s
✅ SPELL misspell 1 0 0.05s
✅ YAML prettier 1 0 0.85s
✅ YAML v8r 1 0 2.13s
✅ YAML yamllint 1 0 0.15s

See errors details in artifact MegaLinter reports on CI Job page
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

@Ilyesbdlala
Copy link
Copy Markdown
Member

Ilyesbdlala commented Jun 15, 2022

The integration test currently fails due to gitleaks not finding any leaks.
image
This should not happen since we include a leaked private key in a mounted volume as seen here https://github.com/secureCodeBox/secureCodeBox/blob/main/scanners/gitleaks/integration-tests/gitleaks.test.js#L37-L44

@J12934 J12934 mentioned this pull request Jun 28, 2022
Closed
@J12934 J12934 closed this Jun 28, 2022
@Ilyesbdlala Ilyesbdlala deleted the dependencies/upgrading-gitleaks-to-v8.8.7 branch June 28, 2022 16:54
@rfelber rfelber mentioned this pull request Jul 9, 2022
Closed
@J12934 J12934 mentioned this pull request Jul 13, 2022
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file scanner Implement or update a security scanner

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@secureCodeBoxBot @Ilyesbdlala @J12934