checkmarx-ts / checkmarx-cxflow-github-action

Checkmarx CxFlow GitHub Action with SARIF output
GNU General Public License v3.0
52 stars 53 forks source link

Rewrite section on file filtering #59

Closed james-bostock-cx closed 1 year ago

james-bostock-cx commented 1 year ago

Experimentation shows that escaping is not necessary except when escaping a character that has special meaning for the regular expression engine. For example, the following should be used to match the .git folder and its contents:

--cx-flow.zip-exclude=\.git/.*

Experimentation also shows that enclosing the regular expression in quotes leads to these being considered part of the regular expression(s).

See the following commits and their associated runs:

Commit e9c8243 (run 4001509384) Commit ddf5258 (run 4001545197) Commit 8ada1cb (run 4001666677) Commit 96df8e9 (run 4002464979) Commit aa61fe5 (run 4002501422) Commit edc937b (run 4002541564)