:point_right: scanning question - how to ignore fi...
# infisical-help
g
👉 scanning question - how to ignore files, dirs, etc? 👈 There are a lot of false positives being generated from runtime generated files which are ignored by git and docker. It would be great it
infisical scan
could leverage
.gitignore
and ignore scanning anything there? Alternatively, a way to add ignore patterns to a file would be fine too. I can’t use the
infisical-scan:ignore
as these are runtime generated files (like caching), and I can’t add them to
.infisicalignore
because these files will have different names based on time, machine, etc…
✅ 1
nvm figured this out by myself, after I realised that
infisical scan
is a fork of gitleaks. This worked for me:
Copy code
# This file is used to tell infisical's secret scanner that it can ignore findings in certain files or directories.
# This is useful for cases where you have test files, generated code, or other files that may contain secrets but
# are not actually sensitive.

title = "Infisical secret scan config"

[extend]
useDefault = true

[allowlist]
paths = [
  '''(^|/)tmp/cache/bootsnap''',
]
🙌 1
p
Glad you sorted it out! 😀