Commit metadata not scanned for secrets
Commit metadata not scanned for secrets: a task in LegoFlow-SWE (Harbor dataset). Description TruffleHog currently scans only file content changes (diffs) for secrets. Commit metadata—such as author name, author email, committer name, committer email, commit date, and the commit message body—is…
The task
**Description** TruffleHog currently scans only file content changes (diffs) for secrets. Commit metadata—such as author name, author email, committer name, committer email, commit date, and the commit message body—is parsed but never inspected for secrets. This leaves a security gap: users can inadvertently embed…
Part of Lego-X/LegoFlow-SWE.