Gabriel Fortuna
07/03/2026, 10:36 AMinfisical scan could leverage .gitignore and ignore scanning anything there?
Alternatively, a way to add ignore patterns to a file would be fine too. I can’t use the infisical-scan:ignore as these are runtime generated files (like caching), and I can’t add them to .infisicalignore because these files will have different names based on time, machine, etc…Gabriel Fortuna
07/03/2026, 3:16 PMinfisical scan is a fork of gitleaks. This worked for me:
# This file is used to tell infisical's secret scanner that it can ignore findings in certain files or directories.
# This is useful for cases where you have test files, generated code, or other files that may contain secrets but
# are not actually sensitive.
title = "Infisical secret scan config"
[extend]
useDefault = true
[allowlist]
paths = [
'''(^|/)tmp/cache/bootsnap''',
]Pylon
07/13/2026, 4:16 PM