Skip to content

detect-secrets is slow. #1342

@leplatrem

Description

@leplatrem
$ make lint
...
make lint  2.86s user 0.88s system 103% cpu 3.624 total

out of which:

$ time .venv/bin/detect-secrets-hook `git ls-files | grep -v uv.lock` --baseline .secrets.baseline
...
.venv/bin/detect-secrets-hook `git ls-files | grep -v uv.lock` --baseline   2.15s user 0.05s system 95% cpu 2.301 total

2.3sec (65%) spent in detect-secrets.

In comparison ripsecrets (may not be as good?):

ripsecrets `git ls-files`  1.60s user 0.03s system 410% cpu 0.397 total

Alternatives seem to be https://github.com/betterleaks/betterleaks or https://github.com/trufflesecurity/trufflehog

┆Issue is synchronized with this Jira Task

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions