File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -202,24 +202,6 @@ reviews:
202202 - platformio_override.ini.sample entries that contain only
203203 placeholder/example values.
204204
205- - path : " usermods/**/library.json"
206- instructions : >
207- Scan for secrets and sensitive information in usermod dependency manifests.
208-
209- Flag any of the following:
210- - Dependency URLs that embed credentials in the URL itself (e.g., any URL containing credential-bearing userinfo).
211- - Personal access tokens, OAuth tokens, or API keys as literal strings
212- anywhere in the file.
213- - Values matching well-known secret patterns: GitHub PATs (ghp_...,
214- github_pat_...), AWS access keys (AKIA...), or similarly structured
215- high-entropy tokens.
216-
217- Do NOT flag:
218- - Plain HTTPS or SSH URLs without embedded credentials.
219- - Version specifiers, semver ranges, or commit SHA references that
220- contain no credential prefix.
221- - Repository owner/name path segments (not credential material).
222-
223205 - path : " usermods/**/{readme,README,Readme}.md"
224206 instructions : >
225207 Scan for secrets, passwords, and sensitive information in usermod
You can’t perform that action at this time.
0 commit comments