ggshield secret scan commit-range

Description

Scan each commit in the given commit range.

ggshield secret scan commit-range [OPTIONS] COMMIT_RANGE

Any git compatible commit range can be provided as an input.

Example: ggshield secret scan commit-range HEAD~1...

-b, --banlist-detector DETECTOR: Exclude results from a detector.
--ignore-known-secrets: Ignore secrets already known by GitGuardian dashboard.
--exclude PATTERNS: Do not scan paths that match the specified glob-like patterns.
--exit-zero: Always return a 0 (non-error) status code, even if incidents are found. This option can also be set with the GITGUARDIAN_EXIT_ZERO environment variable.
--show-secrets: Show secrets in plaintext instead of hiding them.
-o, --output PATH: Redirect ggshield output to PATH.
--json: Use JSON output.

This command supports all ggshield global options.

git rev-list COMMIT_RANGE to list several commits to scan:

$ ggshield secret scan commit-range HEAD~2...HEAD