docs: Fingerprint-Format in .betterleaksignore (ohne Commit empfohlen)
quality / python-lint (push) Skipped
quality / node-lint (push) Skipped
quality / php-lint (push) Skipped
quality / secret-scan (push) Successful in 6s
quality / actionlint (push) Successful in 5s
quality / vuln-scan (push) Successful in 16s
quality / sast (push) Successful in 29s
selftest / quality (push) Successful in 35s
quality / python-lint (push) Skipped
quality / node-lint (push) Skipped
quality / php-lint (push) Skipped
quality / secret-scan (push) Successful in 6s
quality / actionlint (push) Successful in 5s
quality / vuln-scan (push) Successful in 16s
quality / sast (push) Successful in 29s
selftest / quality (push) Successful in 35s
This commit is contained in:
@@ -20,10 +20,10 @@ ein Fund den Gate fehlschlagen.
|
||||
|
||||
Pro Repo:
|
||||
- `.betterleaks.toml` im Repo-Root **ersetzt** die zentrale Richtlinie (Vorrang).
|
||||
- `.betterleaksignore` im Repo-Root nimmt einzeln akzeptierte Altlasten auf;
|
||||
Format = `Fingerprint` aus dem JSON-Report: `<commit>:<pfad>:<regel>:<zeile>`.
|
||||
Details zum Fund liefert der Job-Log; Fingerprints lokal per
|
||||
`betterleaks git . --report-format json --report-path r.json`.
|
||||
- `.betterleaksignore` im Repo-Root nimmt einzeln akzeptierte Altlasten auf.
|
||||
Format `<pfad>:<regel>:<zeile>` (empfohlen — greift auch nach neuen Commits) oder
|
||||
der volle `Fingerprint` aus dem JSON-Report `<commit>:<pfad>:<regel>:<zeile>`.
|
||||
Fingerprints lokal per `betterleaks git . --report-format json --report-path r.json`.
|
||||
- Inline-Ausnahme direkt im Code: Kommentar `betterleaks:allow` in der Zeile.
|
||||
|
||||
## WICHTIG — Sichtbarkeit (Gitea-Limitation, verifiziert 2026-08-25)
|
||||
|
||||
Reference in New Issue
Block a user