Files
rustfs/.github/secret_scanning.yml

15 lines
805 B
YAML

# GitHub secret scanning path exclusions.
# Secrets detected under these paths are auto-closed as "ignored by
# configuration" and are not blocked by push protection.
#
# Deliberately NOT excluded: production source files (e.g. rustfs/src/**,
# crates/*/src/**) even when a hit sits inside a #[cfg(test)] module or a
# doc-comment example — excluding the file would also stop scanning the
# production code in it. Close those alerts manually as "used in tests".
paths-ignore:
- "crates/e2e_test/**" # dedicated e2e test crate, test credentials throughout
- "**/tests/**" # Rust integration-test dirs (crates/*/tests, rustfs/tests)
- "**/benches/**" # benchmark harnesses
- ".docker/**" # local docker-compose dev configs (e.g. mqtt vm.args cookie)
- ".vscode/**" # local editor launch configs