Merge pull request awslabs#35 from awslabs/fix-empty-providers

Exclude empty provider output. Closes awslabs#34

git-secrets

@@ -49,7 +49,11 @@ load_patterns() {
   git config --get-all secrets.patterns
   # Execute each provider and use their output to build up patterns
   git config --get-all secrets.providers | while read -r cmd; do
-    echo "$(export IFS=$'\n\t '; $cmd)"
+    local result="$(export IFS=$'\n\t '; $cmd)"
+    # Do not add empty lines from providers as that would match everything.
+    if [ -n "${result}" ]; then
+      echo "$result"
+    fi
   done
 }
 
@@ -65,8 +69,7 @@ load_allowed() {
 load_combined_patterns() {
   local patterns=$(load_patterns)
   local combined_patterns=''
-  for pattern in $patterns
-  do
+  for pattern in $patterns; do
     combined_patterns=${combined_patterns}${pattern}"|"
   done
   combined_patterns=${combined_patterns%?}

test/git-secrets.bats

@@ -299,6 +299,18 @@ load test_helper
   echo "$output" | grep -F 'bam'
 }
 
+@test "Strips providers that return nothing" {
+  repo_run git-secrets --add-provider -- 'echo'
+  [ $status -eq 0 ]
+  repo_run git-secrets --add-provider -- 'echo 123'
+  [ $status -eq 0 ]
+  repo_run git-secrets --list
+  echo "$output" | grep -F 'echo 123'
+  echo 'foo' > $TEST_REPO/bad_file
+  repo_run git-secrets --scan $TEST_REPO/bad_file
+  [ $status -eq 0 ]
+}
+
 @test "--recursive cannot be used with SCAN_*" {
   repo_run git-secrets --scan -r --cached
   [ $status -eq 1 ]