forked from mirrors/kingfisher
- Added kingfisher:ignore (or kingfisher:allow) to silence a finding inline within a file
- Added: to reuse existing inline directives from other scanners, pass --compat-ignore-comments to also accept NOSONAR, kics-scan ignore, gitleaks:allow and trufflehog:ignore
This commit is contained in:
parent
dbb97bdcf3
commit
a003b732fa
21 changed files with 507 additions and 6 deletions
|
|
@ -118,6 +118,14 @@ pub struct ScanArgs {
|
|||
/// Skipwords to allow-list secret matches (case-insensitive, repeatable)
|
||||
#[arg(long = "skip-word", value_name = "WORD")]
|
||||
pub skip_word: Vec<String>,
|
||||
|
||||
/// Also recognise `gitleaks:allow` and `trufflehog:ignore` inline directives
|
||||
#[arg(long = "compat-ignore-comments", default_value_t = false)]
|
||||
pub compat_ignore_comments: bool,
|
||||
|
||||
/// Disable inline ignore directives entirely
|
||||
#[arg(long = "no-ignore", default_value_t = false)]
|
||||
pub no_inline_ignore: bool,
|
||||
}
|
||||
|
||||
/// Confidence levels for findings
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue