Skip to content

detect-secrets is slow. #1342

Description

@leplatrem
$ make lint
...
make lint  2.86s user 0.88s system 103% cpu 3.624 total

out of which:

$ time .venv/bin/detect-secrets-hook `git ls-files | grep -v uv.lock` --baseline .secrets.baseline
...
.venv/bin/detect-secrets-hook `git ls-files | grep -v uv.lock` --baseline   2.15s user 0.05s system 95% cpu 2.301 total

2.3sec (65%) spent in detect-secrets.

In comparison ripsecrets (may not be as good?):

ripsecrets `git ls-files`  1.60s user 0.03s system 410% cpu 0.397 total

Alternatives seem to be https://github.com/betterleaks/betterleaks or https://github.com/trufflesecurity/trufflehog

┆Issue is synchronized with this Jira Task

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions