mirror of
https://github.com/we-promise/sure.git
synced 2026-04-07 14:31:25 +00:00
Replace whole-file pipelock exclude with inline suppression (#1116)
Use `# pipelock:ignore Credential in URL` on the specific false positive line instead of excluding all of client.rb from scanning. The rest of the file is now scanned normally.
This commit is contained in:
2
.github/workflows/pipelock.yml
vendored
2
.github/workflows/pipelock.yml
vendored
@@ -24,5 +24,3 @@ jobs:
|
||||
test-vectors: 'false'
|
||||
exclude-paths: |
|
||||
config/locales/views/reports/
|
||||
# False positive: client.rb stores Bearer token and sends Authorization header by design
|
||||
app/models/assistant/external/client.rb
|
||||
|
||||
Reference in New Issue
Block a user