Secret detection is broken on branch titan_treks_utility_script

[mattanikiej]

Checked for duplicates

No - I haven't checked

🐛 Describe the bug

Fails to install plugins and public emails are flagged as secrets.

🕵️ Expected behavior

detect-secrets has plugins that should prevent this

📜 To Reproduce

Push changes to the repository

🖥 Environment Info

• Version of this software [e.g. vX.Y.Z]
• Operating System: [e.g. MacOSX with Docker Desktop vX.Y]
  ...

📚 Version of Software Used

No response

🩺 Test Data / Additional context

No response

🦄 Related requirements

🦄 #xyz

⚙️ Engineering Details

No response

🎉 Integration & Test

No response

[nutjob4life]

@mattanikiej perfect, thanks

[nutjob4life]

The issue was that the .secrets.baseline referenced two .pem files which were not included in the commit (indeed, they're in the .gitignore).

But when the workflow runs and compares the results with the baseline, it only sees the difference, and assumes any difference is a new disclosure. A smarter workflow would only report new disclosures, not a reduction in secrets.

[jordanpadams]

Install issue identified and PR has been merged. #293