Skip to content

Support running analyze_local outside of a git repository #212

@mgscif

Description

@mgscif

Is your feature request related to a problem? Please describe.
When an analyze_local scan is executed on a directory that is not within a git repository, the command fails.

It appears that the command requires output from the git binary to retrieve the remote-url, the last commit date and the last commit sha. However, these details aren't actually needed/used in the results from what I can tell.

Describe the solution you'd like
I understand the entire point of poutine is to check for security issues in CICD pipeline configuration which is often stored within a git repository, but I would like the ability to execute the analyze_local command to scan a directory that is not part of a git repository.

Describe alternatives you've considered
I'm currently mocking a git binary to output static values for those binary calls, as I'm executing poutine within a custom hardened container image which doesn't contain the git binary.

Additional context
Add any other context or screenshots about the feature request here.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions