Add Gitleaks securityTest

[abzcoding]

Closes #366

I'm not sure that is it better to add Gitleaks as a generic type or a language type called "git"
please feel free to guide me on that one

[abzcoding]

I've also set the severity of issues based on the rule:

1. private keys -> high
2. secrets, non-generic API keys, access-tokens -> medium
3. others -> low

[abzcoding]

because gitleaks outputs stderr into stdout, we cannot decide based on stderr, but we can decide based on return code:

0: no leaks
1: leaks present
2: error encountered

[rafaveira3]

Hey, @abzcoding! I am currently working on this cool PR and found an issue. Would you mind confirming it and also helping me debug it? These were the steps I followed:

make install
. .env
make run-client

Although gitleaks found some low vulnerabilities, it did not append it to huskyCIResults:

[abzcoding]

Hey, @abzcoding! I am currently working on this cool PR and found an issue. Would you mind confirming it and also helping me debug it? These were the steps I followed:

make install
. .env
make run-client

Although gitleaks found some low vulnerabilities, it did not append it to huskyCIResults:

ok, I'll try to investigate the issue.

[abzcoding]

@rafaveira3 can you verify that the issue has been resolved?

[abzcoding]

@rafaveira3 can you verify that the issue has been resolved?

in case you wanted to test it against a vulnerable repository:

https://github.com/gitleakstest/gronit

[rafaveira3]

Hey, @abzcoding! Well, this is awkward... 😅 Would you mind adding that if condition again for the vendor folder? I have run your code in different repositories and it indeed brings a lot of unnecessary information. Could we add both vendor/ and node_modules/?

// dependencies issues will not checked at this moment by huskyCI
		if strings.HasPrefix(issue.File, "vendor/") || strings.HasPrefix(issue.File, "node_modules/") {
			continue
		}

Let's merge it after this last commit! 🚀

[abzcoding]

Hey, @abzcoding! Well, this is awkward... 😅 Would you mind adding that if condition again for the vendor folder? I have run your code in different repositories and it indeed brings a lot of unnecessary information. Could we add both vendor/ and node_modules/?

// dependencies issues will not checked at this moment by huskyCI
		if strings.HasPrefix(issue.File, "vendor/") || strings.HasPrefix(issue.File, "node_modules/") {
			continue
		}

Let's merge it after this last commit! 🚀

no problem, i've implemented it.

p.s: i've mistakenly closed and reopened the issue 😀

[rafaveira3]

@abzcoding, thanks a LOT for this contribution! We are certain that gitleaks will help a lot of developers improve the quality of their code in a secure manner. You rock! 🚀🔥