Skip to content

chore(hooks): migrates prek secret scanner from trufflehog to betterleaks - #47

Draft
wgordon17 wants to merge 1 commit into
gordon-code:mainfrom
wgordon17:chore/migrate-trufflehog-to-betterleaks
Draft

wgordon17 wants to merge 1 commit into
gordon-code:mainfrom
wgordon17:chore/migrate-trufflehog-to-betterleaks

Conversation

@wgordon17

@wgordon17 wgordon17 commented Nov 4, 2026 •

Copy link
Copy Markdown
Member

Summary

  • Replaces the trufflehog prek hook with betterleaks v1.9.0 — faster, MIT-licensed, medium-confidence gate with redacted output
  • Marks the intentional fixture in tests/vm/test_manager.py with a betterleaks:allow comment
  • Verified-history scanning moves to the central khepri-deps/secret-scanning scanner, so no TruffleHog workflow is added here

@wgordon17
wgordon17 force-pushed the chore/migrate-trufflehog-to-betterleaks branch from daa164d to 8113d34 Compare November 4, 2026 19:20

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant