Replace whole-file pipelock exclude with inline suppression (#1116)

Use `# pipelock:ignore Credential in URL` on the specific false
positive line instead of excluding all of client.rb from scanning.
The rest of the file is now scanned normally.
This commit is contained in:
LPW
2026-03-04 05:23:14 -05:00
committed by GitHub
parent 4a3a55d767
commit 0b1ed2e72a
2 changed files with 1 additions and 3 deletions

View File

@@ -24,5 +24,3 @@ jobs:
test-vectors: 'false'
exclude-paths: |
config/locales/views/reports/
# False positive: client.rb stores Bearer token and sends Authorization header by design
app/models/assistant/external/client.rb