Whitelist Trufflehog finding
Summary
Trufflehog is picking up a finding in scripts/entrypoint.sh on line 62, but this appears to be a false positive.
Link to failed pipeline
https://repo1.dso.mil/dsop/opensource/mattermost/mattermost-team-edition/-/jobs/3244624
Local Run
Reason: Password in URL
Path: scripts/entrypoint.sh
Branch: None
Commit: None
Hash: None
export MM_SQLSETTINGS_DATASOURCE="postgres://$MM_USERNAME:$ENCODED_PASSWORD@$DB_HOST:$DB_PORT_NUMBER/$MM_DBNAME?sslmode=disable&connect_timeout=10"
Definition of Done
-
Trufflehog finding is reviewed and resolved
/cc @ironbank-notifications/pipelines
Edited by Al Fontaine