Added a feature to mark/whitelist lines containing false positives

eth0izzle / shhgit

Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories.

MIT License

3.82k stars 479 forks source link

Added a feature to mark/whitelist lines containing false positives #74

Closed b-abderrahmane closed 3 years ago

b-abderrahmane commented 3 years ago

Added a configurable field which allows defining one or many markers so developers can add in their code as in-line comments to whitelist false positives detected by shhgit. We found this pretty handy to get cleaner results without having to blacklist secrets one by one in the config.yaml file.

eth0izzle commented 3 years ago

@b-abderrahmane thank you for this. I've decided not to merge as I don't believe in using pragmas for this. It unnecessarily litters the codebase. Tweaking of the blacklists should match most peoples use cases.