eblume/kingfisher
1
0
Fork 0
forked from mirrors/kingfisher
Code Pull requests Activity Actions

- Added kingfisher:ignore (or kingfisher:allow) to silence a finding inline within a file

Browse source 
- Added: to reuse existing inline directives from other scanners, pass --compat-ignore-comments to also accept NOSONAR, kics-scan ignore,  gitleaks:allow and trufflehog:ignore
This commit is contained in:
Mick Grove 2025-10-09 20:53:17 -07:00
commit 92de1ba63d
14 changed files with 1 additions and 1052 deletions
Download patch file Download diff file Expand all files Collapse all files

2
README.md
View file

@ -117,7 +117,7 @@ See ([docs/COMPARISON.md](docs/COMPARISON.md))
- [Notable Scan Options](#notable-scan-options)
- [Understanding `--confidence`](#understanding---confidence)
- [Ignore known false positives](#ignore-known-false-positives)
- [Inline ignore directives](#inline-ignore-directives)
- [Inline ignore directives](#inline-ignore-directives)
- [Finding Fingerprint](#finding-fingerprint)
- [Rule Performance Profiling](#rule-performance-profiling)
- [CLI Options](#cli-options)

1036
README.md.orig
View file

File diff suppressed because it is too large Load diff

1
src/main.rs
View file

@ -438,7 +438,6 @@ fn create_default_scan_args() -> cli::commands::scan::ScanArgs {
skip_word: Vec::new(),
output_args: OutputArgs { output: None, format: ReportOutputFormat::Pretty },
no_base64: false,
compat_ignore_comments: false,
no_inline_ignore: false,
}
}

1
src/reporter.rs
View file

@ -864,7 +864,6 @@ mod tests {
manage_baseline: false,
skip_regex: Vec::new(),
skip_word: Vec::new(),
compat_ignore_comments: false,
no_inline_ignore: false,
};

1
src/reporter/json_format.rs
View file

@ -164,7 +164,6 @@ mod tests {
skip_regex: Vec::new(),
skip_word: Vec::new(),
no_base64: false,
compat_ignore_comments: false,
no_inline_ignore: false,
}
}

1
tests/int_allowlist.rs
View file

@ -134,7 +134,6 @@ fn run_skiplist(skip_regex: Vec<String>, skip_skipword: Vec<String>) -> Result<u
skip_regex: skip_regex,
skip_word: skip_skipword,
no_base64: false,
compat_ignore_comments: false,
no_inline_ignore: false,
};

1
tests/int_bitbucket.rs
View file

@ -111,7 +111,6 @@ fn test_bitbucket_remote_scan() -> Result<()> {
since_commit: None,
branch: None,
},
compat_ignore_comments: false,
content_filtering_args: ContentFilteringArgs {
max_file_size_mb: 25.0,
no_extract_archives: false,

1
tests/int_dedup.rs
View file

@ -131,7 +131,6 @@ rules:
since_commit: None,
branch: None,
},
compat_ignore_comments: false,
content_filtering_args: ContentFilteringArgs {
max_file_size_mb: 5.0,
extraction_depth: 1,

1
tests/int_github.rs
View file

@ -118,7 +118,6 @@ fn test_github_remote_scan() -> Result<()> {
since_commit: None,
branch: None,
},
compat_ignore_comments: false,
content_filtering_args: ContentFilteringArgs {
max_file_size_mb: 25.0,
no_extract_archives: false,

2
tests/int_gitlab.rs
View file

@ -138,7 +138,6 @@ fn test_gitlab_remote_scan() -> Result<()> {
skip_regex: Vec::new(),
skip_word: Vec::new(),
no_base64: false,
compat_ignore_comments: false,
no_inline_ignore: false,
};
@ -254,7 +253,6 @@ fn test_gitlab_remote_scan_no_history() -> Result<()> {
since_commit: None,
branch: None,
},
compat_ignore_comments: false,
content_filtering_args: ContentFilteringArgs {
max_file_size_mb: 25.0,
no_extract_archives: false,

1
tests/int_redact.rs
View file

@ -95,7 +95,6 @@ async fn test_redact_hashes_finding_values() -> Result<()> {
since_commit: None,
branch: None,
},
compat_ignore_comments: false,
content_filtering_args: ContentFilteringArgs {
max_file_size_mb: 25.0,
extraction_depth: 2,

2
tests/int_slack.rs
View file

@ -124,7 +124,6 @@ impl TestContext {
skip_regex: Vec::new(),
skip_word: Vec::new(),
no_base64: false,
compat_ignore_comments: false,
no_inline_ignore: false,
};
@ -228,7 +227,6 @@ async fn test_scan_slack_messages() -> Result<()> {
since_commit: None,
branch: None,
},
compat_ignore_comments: false,
content_filtering_args: ContentFilteringArgs {
max_file_size_mb: 25.0,
extraction_depth: 2,

1
tests/int_validation_cache.rs
View file

@ -174,7 +174,6 @@ async fn test_validation_cache_and_depvars() -> Result<()> {
since_commit: None,
branch: None,
},
compat_ignore_comments: false,
content_filtering_args: ContentFilteringArgs {
max_file_size_mb: 25.0,
extraction_depth: 2,

2
tests/int_vulnerable_files.rs
View file

@ -117,7 +117,6 @@ impl TestContext {
since_commit: None,
branch: None,
},
compat_ignore_comments: false,
content_filtering_args: ContentFilteringArgs {
max_file_size_mb: 25.0,
extraction_depth: 2,
@ -252,7 +251,6 @@ impl TestContext {
skip_regex: Vec::new(),
skip_word: Vec::new(),
no_base64: false,
compat_ignore_comments: false,
no_inline_ignore: false,
};