👋 Hi folks. To enable secret scanning in our build system, our organization set up a trufflehog Pants backend that is invoked during linting via

LintFilesRequest

. I'm interested in opening a PR upstream to make this backend available to others. Re: https://www.pantsbuild.org/2.18/docs/contributions#first-share-your-plan , writing to share the suggestion before I go and submit a PR. From first glance , it looks like the backend would be appropriate living in this directory , alongside semgrep and yamllint. Let me know if that sounds right or if there are any concerns in general for adding trufflehog as a backend.

Thanks for this, sounds very useful! Since it isn't specific to any language, I think the directory you identified is exactly right.

Thanks @happy-kitchen-89482! Just opened up https://github.com/pantsbuild/pants/pull/20968 , modeled mostly after https://github.com/pantsbuild/pants/pull/18593