UNCLASSIFIED - NO CUI

Whitelist Trufflehog finding

Summary

Trufflehog is picking up a finding in scripts/entrypoint.sh on line 62, but this appears to be a false positive.

Link to failed pipeline

https://repo1.dso.mil/dsop/opensource/mattermost/mattermost-team-edition/-/jobs/3244624

Local Run

Reason: Password in URL
Path:   scripts/entrypoint.sh
Branch: None
Commit: None
Hash:   None
export MM_SQLSETTINGS_DATASOURCE="postgres://$MM_USERNAME:$ENCODED_PASSWORD@$DB_HOST:$DB_PORT_NUMBER/$MM_DBNAME?sslmode=disable&connect_timeout=10"

Definition of Done

  • Trufflehog finding is reviewed and resolved

/cc @ironbank-notifications/pipelines

Edited by Al Fontaine