Re:GitHub commit search: “remove password”
by chiefalchemist on Thursday February 16, 2017 @07:53PM
(#13665030)
Exactly! So we agree that Git - as it is today - is not up to the task(s)? :)
That's all I'm trying to say
We keep expecting a cat to bark, and then we're shocked and disappointed that it doesn't. So let's stop asking and find / build a better tool.
Re:GitHub commit search: “remove password”
by muthuraj57 on Wednesday February 15, 2017 @08:28AM
(#13651822)
At least parsing and checking the commit message wouldn't be too hard, right?
Git would have to first decide whether a file is a textfile or binary file, a decision that can be done reasonably well heuristically but that is undecidable in the general case. Then it has to parse text files for a long, curated list of known keywords that are only used for storing API keys and are not (usually) used in normal code. I'm not sure if that's even feasable.
And then of course git has no concept of "public" and "private" repos, so the entire task can't be handled well by git.