Skip to content
This repository has been archived by the owner on Nov 4, 2024. It is now read-only.

Commit

Permalink
Merge pull request #134 from galasa-dev/mcobbett-detect-secrets-fix
Browse files Browse the repository at this point in the history
build-locally script detect secrets should have no timestamp left in file on linux
  • Loading branch information
techcobweb authored Oct 16, 2024
2 parents 26be0be + 8e151ea commit 7aeab48
Showing 1 changed file with 14 additions and 2 deletions.
16 changes: 14 additions & 2 deletions build-locally.sh
Original file line number Diff line number Diff line change
Expand Up @@ -73,7 +73,7 @@ function check_exit_code () {
function check_secrets {
h2 "updating secrets baseline"
cd ${BASEDIR}
detect-secrets scan --update .secrets.baseline
detect-secrets scan --update .secrets.baseline
rc=$?
check_exit_code $rc "Failed to run detect-secrets. Please check it is installed properly"
success "updated secrets file"
Expand All @@ -90,9 +90,21 @@ function check_secrets {
error "Not all secrets found have been audited"
exit 1
fi
sed -i '' '/[ ]*"generated_at": ".*",/d' .secrets.baseline
success "secrets audit complete"

h2 "Removing the timestamp from the secrets baseline file so it doesn't always cause a git change."
mkdir -p temp
rc=$?
check_exit_code $rc "Failed to create a temporary folder"
cat .secrets.baseline | grep -v "generated_at" > temp/.secrets.baseline.temp
rc=$?
check_exit_code $rc "Failed to create a temporary file with no timestamp inside"
mv temp/.secrets.baseline.temp .secrets.baseline
rc=$?
check_exit_code $rc "Failed to overwrite the secrets baseline with one containing no timestamp inside."
success "secrets baseline timestamp content has been removed ok"
}

#-----------------------------------------------------------------------------------------
# Main logic.
#-----------------------------------------------------------------------------------------
Expand Down

0 comments on commit 7aeab48

Please sign in to comment.