mirror of
https://github.com/GeWuYou/GFramework.git
synced 2026-03-22 02:24:30 +08:00
5c8de84256
- 在.gitleaks.toml中添加测试凭证白名单注释说明 - 为MegaLinter步骤添加代码质量检查和安全扫描功能 - 配置FAIL_ON_ERROR环境变量在main分支上失败时停止 - 添加SARIF报告上传步骤到GitHub安全中心 - 更新TruffleHog扫描步骤的中文注释说明
16 lines
249 B
TOML
16 lines
249 B
TOML
# Allowlist for fake/test/demo secrets only
|
|
# DO NOT add real credentials here
|
|
[allowlist]
|
|
description = "Ignore test/demo secrets"
|
|
|
|
paths = [
|
|
"docs/.*",
|
|
".*Test.*\\.json",
|
|
".*Development.*"
|
|
]
|
|
|
|
regexes = [
|
|
"FAKE_.*_KEY",
|
|
"TEST_.*_TOKEN"
|
|
]
|