What will happen when you commit secrets to a public Git repo?

Re:What will happen when you commit secrets to a public Git ... by dorfsmay on Saturday November 07, 2020 @08:58AM (#25015101)

Do you also scan when a private repo is changed to public?

[ Parent | on HN ]

Re:What will happen when you commit secrets to a public Git ... by greysteil on Saturday November 07, 2020 @09:25AM (#25015225)

I think so, and we 100% should do, but I just did a test and the secret I committed was still working a full minute after I converted the repo. Could be that the scan was in a queue, could be that it didn't trigger.

I'll dig into it and make sure this is working and is fast - it's a critical time to do a full scan of the repo's git history.

[ Parent | on HN ]

Re:What will happen when you commit secrets to a public Git ... by OJFord on Saturday November 07, 2020 @10:13AM (#25015491)

So scanning is only done on public repos?

[ Parent | on HN ]

Re:What will happen when you commit secrets to a public Git ... by mackenzie-gg on Monday November 09, 2020 @04:21AM (#25032938)

GitGuardian scans on every event, this includes a public event (when a Repo is made public) and will alert if secrets are found within.

[ Parent | on HN ]