Skip to content

detect-secrets is slow. #1342

Description

@leplatrem
$ make lint
...
make lint  2.86s user 0.88s system 103% cpu 3.624 total

out of which:

$ time .venv/bin/detect-secrets-hook `git ls-files | grep -v uv.lock` --baseline .secrets.baseline
...
.venv/bin/detect-secrets-hook `git ls-files | grep -v uv.lock` --baseline   2.15s user 0.05s system 95% cpu 2.301 total

2.3sec (65%) spent in detect-secrets.

In comparison ripsecrets (may not be as good?):

ripsecrets `git ls-files`  1.60s user 0.03s system 410% cpu 0.397 total

Alternatives seem to be https://github.com/betterleaks/betterleaks or https://github.com/trufflesecurity/trufflehog

┆Issue is synchronized with this Jira Task

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Fields

    Priority

    None yet

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions