github.com
/
verdaccio
mirror of https://github.com/verdaccio/verdaccio.git
1
0
Fork 0
Code Releases Wiki Activity

fix(security): add secrets baseline

This commit is contained in:
Liran Tal 2019-07-19 08:02:08 +03:00
parent aa8f1d3318
commit 2b218ce0de
No known key found for this signature in database
GPG Key ID: 073F633B3575FF1E
3 changed files with 2996 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2989
.secrets-baseline Normal file
View File

File diff suppressed because it is too large Load Diff

6
package.json
View File

@ -70,7 +70,7 @@
"@verdaccio/types": "5.2.2",
"codecov": "3.5.0",
"cross-env": "5.2.0",
"detect-secrets": "1.0.2",
"detect-secrets": "1.0.3",
"eslint": "5.16.0",
"get-stdin": "7.0.0",
"husky": "2.7.0",
@ -135,14 +135,14 @@
"relative": true,
"linters": {
"*.yaml": [
"detect-secrets-launcher",
"prettier --parser yaml --no-config --single-quote --write",
"detect-secrets-launcher --baseline .secrets-baseline",
"git add"
],
"*": [
"detect-secrets-launcher",
"eslint .",
"prettier --write",
"detect-secrets-launcher --baseline .secrets-baseline",
"git add"
]
},

8
yarn.lock
View File

@ -3089,10 +3089,10 @@ detect-newline@^2.1.0:
resolved "https://registry.verdaccio.org/detect-newline/-/detect-newline-2.1.0.tgz#f41f1c10be4b00e87b5f13da680759f2c5bfd3e2"
integrity sha1-9B8cEL5LAOh7XxPaaAdZ8sW/0+I=
detect-secrets@1.0.2:
version "1.0.2"
resolved "https://registry.npmjs.org/detect-secrets/-/detect-secrets-1.0.2.tgz#f0093ca4db1d54908e3b3c90be98f88dbb11676f"
integrity sha512-Ap9hetQaNlHfxGRSlDrfoEIPQAduR9E1FijJj6AN1zYeW/r6GB5jXfM92dhfA7PaFvywh2BreA4J8nQFiE8AJg==
detect-secrets@1.0.3:
version "1.0.3"
resolved "https://registry.npmjs.org/detect-secrets/-/detect-secrets-1.0.3.tgz#ad46e11bdffc96a9338118cf5952d1a0609d91a1"
integrity sha512-+qZ1S0Zssnz74uluISDHUkH7OpMI2tKbyn8PhQuNY/ffvZ4JvSCC9ouWAtE2Ac6726NtTip6GkNacSuxYpnAZw==
dependencies:
debug "^4.1.0"
which "^1.3.1"