[go: up one dir, main page]

[Backend] Update secrets push check to exclude based on existing exclusions

Overview

This issue tracks the work required to have the secrets push check load, and handle existing exclusions for a certain project.

The expectation is that the push check will perform the following actions (marked ones are already performed):

  • Project Eligibility Check
  • Payload Retrieval (whether those payloads are entire blobs or diffs).
  • Project Security Exclusions Retrieval
  • Run Scanning Engine (i.e. Gem or SDS) with Payloads + Exclusions Data
  • Format and Display Scan Results

Implementation Plan

Below is a list of tasks to perform in order to achieve the desired outcome of this issue.

  • Update secrets push check to retrieve exclusions data from the database.
  • Update secrets push check to run scanning engines with payload and exclusions data.
  • Update corresponding tests to confirm the behaviour works as intended.
Edited by Ahmed Hemdan