secretlint/module/search.js

Secretlint CLI that scan secret/credential data.

import { walk } from "@secretlint/walker";
import debug0 from "debug";
const debug = debug0("secretlint");
// Patterns are written WITHOUT a trailing `/**` so node-ignore prunes the
// directory itself (not just its contents). With `**/foo/**` the walker
// would still readdir `foo/` and check each child individually.
//
// node-ignore (gitignore semantics) does not expand braces, so the four
// `.secretlintrc.{json,yaml,yml,js}` variants are listed individually
// rather than as a single brace pattern.
const DEFAULT_IGNORE_PATTERNS = [
    "**/.git",
    "**/node_modules",
    "**/.secretlintrc",
    "**/.secretlintrc.json",
    "**/.secretlintrc.yaml",
    "**/.secretlintrc.yml",
    "**/.secretlintrc.js",
    "**/.secretlintignore*",
];
/**
 * Search files matching the given patterns under `options.cwd`.
 * Always honours DEFAULT_IGNORE_PATTERNS. When `respectGitignore` is true
 * (default), nested `.gitignore` files are respected with Git semantics.
 *
 * Patterns are interpreted as globs by default. To pass a literal path —
 * for example a file whose name contains glob special characters such as
 * `[`, `(`, `{`, or `?` — set `noGlob: true` (CLI: `--no-glob`).
 */
export const searchFiles = async (patterns, options) => {
    const ignoreFiles = [];
    if (options.ignoreFilePath)
        ignoreFiles.push(options.ignoreFilePath);
    if (options.respectGitignore !== false)
        ignoreFiles.push(".gitignore");
    debug("search patterns: %o", patterns);
    debug("search DEFAULT_IGNORE_PATTERNS: %o", DEFAULT_IGNORE_PATTERNS);
    debug("search ignoreFiles: %o", ignoreFiles);
    const items = await walk({
        cwd: options.cwd,
        patterns,
        ignoreFiles,
        extraIgnorePatterns: DEFAULT_IGNORE_PATTERNS,
        noGlob: options.noGlob,
    });
    if (items.length > 0) {
        return { ok: true, items };
    }
    /**
     * If the result is empty because every match was filtered out by an
     * ignore file, suppress the "not found target file" error. The
     * fallback walk drops the file-based cascade (`ignoreFiles: []`) but
     * keeps DEFAULT_IGNORE_PATTERNS so we never descend into `.git/` or
     * `node_modules/` just to answer this diagnostic question.
     */
    const itemsWithoutIgnore = await walk({
        cwd: options.cwd,
        patterns,
        ignoreFiles: [],
        extraIgnorePatterns: DEFAULT_IGNORE_PATTERNS,
        noGlob: options.noGlob,
    });
    return {
        ok: itemsWithoutIgnore.length > 0,
        items: [],
    };
};
//# sourceMappingURL=search.js.map