Skip to content

perf(trufflehog): single process for PR changed-file scan#148

Closed
isaiah-grafana wants to merge 1 commit intografana:mainfrom
isaiah-grafana:feat/trufflehog-single-pr-scan
Closed

perf(trufflehog): single process for PR changed-file scan#148
isaiah-grafana wants to merge 1 commit intografana:mainfrom
isaiah-grafana:feat/trufflehog-single-pr-scan

Conversation

@isaiah-grafana
Copy link
Copy Markdown
Contributor

@isaiah-grafana isaiah-grafana commented Apr 14, 2026

Runs one trufflehog filesystem over the filtered changed-path list for pull_request / merge_group instead of one process per file.

Why: Each invocation pays full startup (detectors, engine init). On large PRs that dominated wall time and runner cost even when per-file scan logs showed only milliseconds.

Behavior: Same excludes and same skip rules (excluded paths, missing files / deletions). Non-PR path unchanged (still scans . once).

@isaiah-grafana isaiah-grafana requested a review from a team as a code owner April 14, 2026 18:54
@isaiah-grafana isaiah-grafana force-pushed the feat/trufflehog-single-pr-scan branch 2 times, most recently from ba81ff1 to 72d4c53 Compare April 14, 2026 21:10
Run a single trufflehog filesystem invocation with the filtered path list
instead of one process per file, avoiding repeated startup cost that
dominated wall time on large diffs.

Made-with: Cursor
@isaiah-grafana
Copy link
Copy Markdown
Contributor Author

Superseded by #151 (same-repo branch).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant