buildSecrets: extra checks for golangci

jirfag · jirfag · commit 91c73b85b20f · 2019-06-29T16:29:22.000+03:00
diff --git a/pkg/worker/analyze/processors/escape.go b/pkg/worker/analyze/processors/escape.go
@@ -61,6 +61,11 @@ func buildSecrets(vars ...string) map[string]string {
 		}
 
 		v := parts[1]
+
+		if strings.EqualFold(v, "golangci") || strings.EqualFold(v, "golangci-lint") {
+			continue // just extra check because these are critical words
+		}
+
 		if len(v) >= minSecretValueLen {
 			ret[v] = hidden
 		}

Original file line number	Diff line number	Diff line change
`@@ -61,6 +61,11 @@ func buildSecrets(vars ...string) map[string]string {`
`61`	`61`	`}`
`62`	`62`
`63`	`63`	`v := parts[1]`
	`64`	`+`
	`65`	`+ if strings.EqualFold(v, "golangci") \|\| strings.EqualFold(v, "golangci-lint") {`
	`66`	`+ continue // just extra check because these are critical words`
	`67`	`+ }`
	`68`	`+`
`64`	`69`	`if len(v) >= minSecretValueLen {`
`65`	`70`	`ret[v] = hidden`
`66`	`71`	`}`