eliott/sure
1
0
Fork 0
mirror of https://github.com/we-promise/sure synced 2026-04-25 17:15:07 +02:00
Code Issues Packages Projects Releases Wiki Activity

Replace whole-file pipelock exclude with inline suppression (#1116)

Browse Source 
Use `# pipelock:ignore Credential in URL` on the specific false
positive line instead of excluding all of client.rb from scanning.
The rest of the file is now scanned normally.
This commit is contained in:
LPW
2026-03-04 05:23:14 -05:00
committed by GitHub
parent 4a3a55d767
commit 0b1ed2e72a
2 changed files with 1 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
.github/workflows/pipelock.yml vendored
View File

@@ -24,5 +24,3 @@ jobs:
test-vectors: 'false'
exclude-paths: |
config/locales/views/reports/
# False positive: client.rb stores Bearer token and sends Authorization header by design
app/models/assistant/external/client.rb

2
app/models/assistant/external/client.rb vendored
View File

@@ -20,7 +20,7 @@ class Assistant::External::Client
def initialize(url:, token:, agent_id: "main", session_key: "agent:main:main")
@url = url
@token = token
@token = token # pipelock:ignore Credential in URL
@agent_id = agent_id
@session_key = session_key
end