Check commits for bypass flag
Overview
To handle false positives, for example in cases where a developer need to commit a dummy secret that is used in tests, and to allow users to skip secrets detection entirely in case of timeouts for instance, we are introducing a special commit message flag similar to [ci skip].
Implementation Plan
-
Determine the exact variation to be used: [skip secret detection],[secret detection skip], or both. -
Update the new push check to: -
Skip scanning if the variation exists in any of the commit messages associated with the push. -
Display instructions on how to skip secret detection if needed using the flag.
-
Edited by Ahmed Hemdan