Detect secrets scans entire codebase every time?

[oerp-odoo]

Am I doing something wrong here? I have pre-commit hook setup like this:

  - repo: https://github.com/Yelp/detect-secrets
    rev: v1.5.0
    hooks:
      - id: detect-secrets
        args:
          - --baseline=.secrets.baseline

But every time I commit, it seems like it scans whole codebase, which is very slow (as we have large codebase). I want it to scan only changed files. Is there a way to do that?

[gpflaum]

I'm not familiar with the pre-commit framework, but I think this is the part you're missing:

entry: detect-secrets-hook

It sounds like detect-secrets is running, which does a full scan, while you need detect-secrets-hook.

[oerp-odoo]

@gpflaum it looks like it scans the same way whether I add entry or not.