search

cloud-gov / caulking

Prevent leaks with gitleaks, and use tests to validate
Other
32 stars 11 forks source link

Mute false positives in vendor/github.com vendor/gopkg.in #15

Closed pburkholder closed 4 years ago

pburkholder commented 4 years ago

In order to not get flagged for patterns in upstream code bases, we should whitelist Go vendor stuff in vendor/gopkg.in and vendor/github.com

See for example Van's branch https://github.com/cloud-gov/aws-broker/tree/redis-service

Security considerations

pburkholder commented 4 years ago

Added rules for ignore Godep and vendor,

also fixed up email matches