- Added kingfisher:ignore (or kingfisher:allow) to silence a finding inline within a file

- Added: to reuse existing inline directives from other scanners, pass --compat-ignore-comments to also accept NOSONAR, kics-scan ignore,  gitleaks:allow and trufflehog:ignore
This commit is contained in:
Mick Grove 2025-10-09 20:11:31 -07:00
commit a003b732fa
21 changed files with 507 additions and 6 deletions

View file

@ -118,6 +118,14 @@ pub struct ScanArgs {
/// Skipwords to allow-list secret matches (case-insensitive, repeatable)
#[arg(long = "skip-word", value_name = "WORD")]
pub skip_word: Vec<String>,
/// Also recognise `gitleaks:allow` and `trufflehog:ignore` inline directives
#[arg(long = "compat-ignore-comments", default_value_t = false)]
pub compat_ignore_comments: bool,
/// Disable inline ignore directives entirely
#[arg(long = "no-ignore", default_value_t = false)]
pub no_inline_ignore: bool,
}
/// Confidence levels for findings