generated from mathias/template-go-web
mathias
e1169e2c80
CD / Lint / Test / Vet (push) Successful in 10s
infra#344. gitleaks ORs the clauses of a GLOBAL `[[allowlists]]` block and does not honour `condition = "AND"` there, so the `paths` entry suppressed EVERY finding in the named file — not only the false positive the `regexes` line describes. The regex alone is what was meant, and it works regardless of which file the value turns up in (infra#256). Verified rather than assumed, with a control for the probe itself: a live-shaped credential planted in the formerly-exempt file scans clean before this change and fires after it, and the same shape fires in a neutral path both ways (so "not detected" cannot be mistaken for "immune"). The intended false positive is still suppressed — the tree scans clean. Refs: mathias/infra#344, mathias/infra#256, mathias/infra#317
hostexecutor
Generated from
mathias/template-go-web.
Bootstrap
After creating from template, run:
go mod tidy # regenerate go.sum with real module path
task generate # generate templ files
task build # build the binary