As a tool for aggregating data sources, Graphweaver integrates with many data providers. Each provider has its own method of authentication. To prevent leaking secrets Grapheaver has a pre-commit hook that that uses GitLeaks to ensure that no live secrets are being committed to code. To accomplish this locally contributors must:
- Install GitLeaks with
brew install gitleaks
- Install pre-commit from https://pre-commit.com/#install
- Auto-update the config to the latest repos' versions by executing
pre-commit autoupdate
- Install with
pre-commit install
Now a precommit hook will run every time a commit is made.
This is a condensed version of the instructions found here: https://github.com/gitleaks/gitleaks