Skip to content

Commit 9882c29

Browse files
authored
Remove secret scanning instructions for library.json
WLED-MM does not have library.json for usermods.
1 parent af38dd6 commit 9882c29

1 file changed

Lines changed: 0 additions & 18 deletions

File tree

.coderabbit.yaml

Lines changed: 0 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -202,24 +202,6 @@ reviews:
202202
- platformio_override.ini.sample entries that contain only
203203
placeholder/example values.
204204
205-
- path: "usermods/**/library.json"
206-
instructions: >
207-
Scan for secrets and sensitive information in usermod dependency manifests.
208-
209-
Flag any of the following:
210-
- Dependency URLs that embed credentials in the URL itself (e.g., any URL containing credential-bearing userinfo).
211-
- Personal access tokens, OAuth tokens, or API keys as literal strings
212-
anywhere in the file.
213-
- Values matching well-known secret patterns: GitHub PATs (ghp_...,
214-
github_pat_...), AWS access keys (AKIA...), or similarly structured
215-
high-entropy tokens.
216-
217-
Do NOT flag:
218-
- Plain HTTPS or SSH URLs without embedded credentials.
219-
- Version specifiers, semver ranges, or commit SHA references that
220-
contain no credential prefix.
221-
- Repository owner/name path segments (not credential material).
222-
223205
- path: "usermods/**/{readme,README,Readme}.md"
224206
instructions: >
225207
Scan for secrets, passwords, and sensitive information in usermod

0 commit comments

Comments
 (0)