> On Mar 8, 2022, at 4:40 AM, Nick Dimiduk <ndimi...@apache.org> wrote:
>
> +1
>
> Aside: can you point me toward the details discussions on both of these
> blockers? I’d like to help out if I can.
That’d be great!
For the audience annotations issues, YETUS-557 and then YETUS-1155 has most of
the details. I think it is just a trivial problem but my Java skills are super
rusty at this point with that many levels of abstractions happening. haha.
The detect-secrets one I’ve been keeping track of in an unofficial capacity
mainly due to $DAYJOB’s experience with it. A quick summary:
* 1.x up until the point of integration into Yetus was broken on some
edge case YAML and didn’t work with recent Python versions… but when it did
work, was increidbly fast.
* In addition, 1.x appeared to be dead beacuse of changes at Yelp.
* In order to make some progress, I built the code to integrate the IBM
fork of 0.9.x which worked reasonably well (but slow!) and they said they’d
keep their fork alive since it was part of (something).
* Since that time, within the past few weeks+days,
https://github.com/Yelp/detect-secrets/issues/473 was updated and
detect-secrets 1.3.0 was released which from the outside appears to fix the
issues that $DAYJOB is having. I need to do more tests though as soon as I can
free up some time. Assuming that goes well, will just pop this version in
place and update the necessary bits.
Thanks!
