search

cloud-gov / caulking

Prevent leaks with gitleaks, and use tests to validate
Other
32 stars 11 forks source link

Do not flag bash variables for passwords #61

Open pburkholder opened 2 years ago

pburkholder commented 2 years ago

In order to avoid false positives, do not flag on with things like "offender": "password\": \"${mailer_password}\""

Security considerations

Fewer false positives are better.