Ignore found secrets based on an ID (Finding ID/Match ID/Blob ID)

[spaceduck567]

Thank you for developing this tool. It is really helpful, but I have a question: We use NoseyParker as a secret scanner in our PreCommit Hook to check the latest changes. In this context, ignoring files is not helpful. Is there a way to ignore secrets based on generated IDs (Finding ID/Match ID/Blob ID)? Or is something like this planned for the near future?

Thanks in advance :).

[bradlarsen]

Thanks for the kind words @spaceduck567!

There is not a built-in way to ignore secrets based on finding ID, match ID, or blob ID. I don't have immediate plans to add this, though it is a natural use case and something I'd like to eventually support.

In the meantime, you could have NP report in json or jsonl format, write a small script that loads that output and filters out findings, matches, and blobs based on their IDs.

[spaceduck567]

Thank you for the quick response @bradlarsen. I really appreciate that. Okay, then we will temporarily implement our own solution.

[bradlarsen]

@spaceduck567 your pre-commit hook for Nosey Parker isn't public, is it? That sounds useful.

[spaceduck567]

At the moment it is only available internally, but I can talk to the team to see if we can make it public :).