Add a way to ignore false positive in code
jooh-lee opened this issue · 1 comments
Is your feature request related to a problem? Please describe.
Right now when insidersec detects a problem or finds some DRA in code there is no way to flag it as a false positive. It would be nice to have some way to tell insidersec to ignore such line/lines of code
Describe the solution you'd like
I think something like // insidersec:ignore
for js and the equivalent comment in other languages would be easy for lines and putting that on the top of the file would just ignore the whole file.
Describe alternatives you've considered
One alternative to the file level ignore is the --exclusion flag thats been brought up in the issues
Additional context
None
Is there any update on this? There are rules that I would like to be able to ignore, but I still don't think that this is possible.