Cred digger finds false positives issues

SAP / credential-digger

A Github scanning tool that identifies hardcoded credentials while filtering the false positive data through machine learning models :lock:

Apache License 2.0

325 stars 49 forks source link

Cred digger finds false positives issues #334

Open idogoren opened 1 week ago

idogoren commented 1 week ago

Hi,

We're using the tool with version 4.14.0. The tool generate the findings.csv file with the following finding:

authentication:
  username: ""
  password: ""

As you can see, empty string is something that the tool should ignore. We should find a way to suppress such issue so the tool won't include them in the final report. Please let me know if any other information should be provided.

Thanks