Get Secret Scan - list of files scanned

Sachin Kaushik_4xx998

Hi, I have a pipe for secret scanning like this :

- step: name: Secret Scanning script:

  - pipe: atlassian/git-secrets-scan:0.4.3

    variables:

      FILES: "**/*.json ."

 

I am expecting it to scan my appSettings.json file for exposed secrets, which is placed in my project directory, but it does not. Is there a way I can check what all files it scanned? And does it generate a default report that I can use later in my step?

Igor Stoyanov

Hi @Sachin Kaushik. Thanks for your question.

First of all try to update git-secrets-scan pipe to the latest version, so the reports feature will be enabled in this pipe.

I suggest to try basic example so your full repository will be scanned by the tool.

script:
  - pipe: atlassian/git-secrets-scan:3.0.0

In case you want some specific folder to be scanned you could try this example:

script:
  - pipe: atlassian/git-secrets-scan:3.0.0
    variables:
      GITLEAKS_COMMAND: "dir"
      GITLEAKS_EXTRA_ARGS: "./path_to_directory_or_file"

Regards, Igor