securing / DumpsterDiver

Tool to search secrets in various filetypes.
MIT License
977 stars 153 forks source link

Entropy scanning needs an exception list #47

Open Thorsten-Sick opened 1 year ago

Thorsten-Sick commented 1 year ago

Hi

I have a project with many odd (=high entropy) variable names. With a clean-list of regexes to match after entropy detection hit I could reduce False Positives.

This could just be another yaml file with a list of regexes.

In addition this could also contain a list of file names (also regexes) to exclude from scanning. Some binary files in the project also trigger the entropy scan.

Thanks