-
Notifications
You must be signed in to change notification settings - Fork 30
Description
Is your feature request related to a problem? Please describe.
When an analyze_local scan is executed on a directory that is not within a git repository, the command fails.
It appears that the command requires output from the git binary to retrieve the remote-url, the last commit date and the last commit sha. However, these details aren't actually needed/used in the results from what I can tell.
Describe the solution you'd like
I understand the entire point of poutine is to check for security issues in CICD pipeline configuration which is often stored within a git repository, but I would like the ability to execute the analyze_local command to scan a directory that is not part of a git repository.
Describe alternatives you've considered
I'm currently mocking a git binary to output static values for those binary calls, as I'm executing poutine within a custom hardened container image which doesn't contain the git binary.
Additional context
Add any other context or screenshots about the feature request here.