`pragma: whitelist secret` doesn't support additional text about detect-secrets HOT 5 CLOSED

This was solved by the wonderful @dgzlopes

from detect-secrets.

Help me please.
how write # pragma: whitelist secret in java?

I have 2 false positive:
1)
this.clientSecret = clientSecret; //# pragma: whitelist secret
2)
String x =", clientSecret='" + this.clientSecret +"'"; //# pragma: whitelist secret

from detect-secrets.

Hi @asdrubalos, I believe you can put a space after the //

When I scan

$ cat test.java 
API_KEY = "blahwww"
API_KEY = "blah-blah-but-actually-not-secret" # pragma: whitelist secret
1)
this.clientSecret = clientSecret; // # pragma: whitelist secret
2)
String x =", clientSecret='" + this.clientSecret +"'"; //# pragma: whitelist secret

with the latest detect-secrets (0.12.0) this.clientSecret = clientSecret; was reported if I did not have a space between // and #

from detect-secrets.

Also @asdrubalos , I will be sure to make quotes required for keyword secrets in .java files in the next version after #133 is merged

Thank you for the report 👍

from detect-secrets.

Actually just // should work as well, e.g. // pragma: whitelist secret, this is due to this PR https://github.com/Yelp/detect-secrets/pull/105/files

We should document that better though 👍 We'll be sure to do that too

from detect-secrets.