Limit gitleaks scanned files to 50MB. TODO: make configurable (#648)

openclarity · Sep 6, 2023 · c01a552 · c01a552
1 parent f3a933d
commit c01a552
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/pkg/shared/families/secrets/gitleaks/gitleaks.go b/pkg/shared/families/secrets/gitleaks/gitleaks.go
@@ -75,9 +75,9 @@ func (a *Scanner) Run(sourceType utils.SourceType, userInput string) error {
 		}()
 		reportPath := file.Name()
 
-		// ./gitleaks detect --source=<source> --no-git -r <report-path> -f json --exit-code 0
+		// ./gitleaks detect --source=<source> --no-git -r <report-path> -f json --exit-code 0 --max-target-megabytes 50
 		// nolint:gosec
-		cmd := exec.Command(a.config.BinaryPath, "detect", fmt.Sprintf("--source=%v", userInput), "--no-git", "-r", reportPath, "-f", "json", "--exit-code", "0")
+		cmd := exec.Command(a.config.BinaryPath, "detect", fmt.Sprintf("--source=%v", userInput), "--no-git", "-r", reportPath, "-f", "json", "--exit-code", "0", "--max-target-megabytes", "50")
 		a.logger.Infof("Running gitleaks command: %v", cmd.String())
 		_, err = sharedutils.RunCommand(cmd)
 		if err != nil {