insidersec/insider

Add a way to ignore false positive in code

jooh-lee opened this issue · 1 comments

Is your feature request related to a problem? Please describe.
Right now when insidersec detects a problem or finds some DRA in code there is no way to flag it as a false positive. It would be nice to have some way to tell insidersec to ignore such line/lines of code

Describe the solution you'd like
I think something like // insidersec:ignore for js and the equivalent comment in other languages would be easy for lines and putting that on the top of the file would just ignore the whole file.

Describe alternatives you've considered
One alternative to the file level ignore is the --exclusion flag thats been brought up in the issues

Additional context
None

Is there any update on this? There are rules that I would like to be able to ignore, but I still don't think that this is possible.