Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: add git-secrets-scan to repository #122

Merged
merged 6 commits into from
Feb 27, 2025

Conversation

kaizencc
Copy link
Contributor

Will also need to be added to aws-cdk-cli-testing i believe. git-secrets-scan.sh is copied directly from the old repo; i didn't want to also change it to a typescript file. it runs now before npx projen build.


By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

@codecov-commenter
Copy link

codecov-commenter commented Feb 25, 2025

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 84.66%. Comparing base (9873ff2) to head (dcfb88c).

Additional details and impacted files
@@            Coverage Diff             @@
##             main     #122      +/-   ##
==========================================
+ Coverage   84.59%   84.66%   +0.06%     
==========================================
  Files         198      198              
  Lines       35380    35380              
  Branches     4547     4560      +13     
==========================================
+ Hits        29931    29954      +23     
+ Misses       5298     5281      -17     
+ Partials      151      145       -6     
Flag Coverage Δ
suite.unit 84.66% <ø> (+0.06%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@kaizencc kaizencc added the pr/exempt-integ-test Skips the integ test steps if set. label Feb 25, 2025
.projenrc.ts Outdated
],
});

repoProject.tasks.tryFind('build')?.prependSpawn(gitSecretsScan);
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
repoProject.tasks.tryFind('build')?.prependSpawn(gitSecretsScan);
repoProject.tasks.tryFind('build')!.prependSpawn(gitSecretsScan);

So that we fail in case something here changes unexpectedly. Also, probably best to run this AFTER the projen default task because that step can generate code and files.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

now its after default but also after build and eslint, but i think thats fine

kaizencc and others added 3 commits February 26, 2025 13:39
Signed-off-by: github-actions <github-actions@github.com>
@aws-cdk-automation aws-cdk-automation added this pull request to the merge queue Feb 27, 2025
Merged via the queue into main with commit ce77923 Feb 27, 2025
11 checks passed
@aws-cdk-automation aws-cdk-automation deleted the conroy/git-secrets-scan branch February 27, 2025 08:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
pr/exempt-integ-test Skips the integ test steps if set.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants