ship-safe 2.0.0 → 3.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +109 -7
- package/cli/bin/ship-safe.js +36 -1
- package/cli/commands/fix.js +216 -0
- package/cli/commands/guard.js +297 -0
- package/cli/commands/mcp.js +303 -0
- package/cli/commands/scan.js +231 -39
- package/cli/utils/entropy.js +126 -0
- package/cli/utils/output.js +10 -1
- package/cli/utils/patterns.js +32 -1
- package/configs/ship-safeignore-template +50 -0
- package/package.json +1 -1
|
@@ -0,0 +1,50 @@
|
|
|
1
|
+
# .ship-safeignore
|
|
2
|
+
# =================
|
|
3
|
+
# Exclude paths from ship-safe secret scanning.
|
|
4
|
+
# Same syntax as .gitignore — one pattern per line, # for comments.
|
|
5
|
+
#
|
|
6
|
+
# Ship-safe already skips test files by default.
|
|
7
|
+
# Use this file to exclude additional paths that generate false positives.
|
|
8
|
+
#
|
|
9
|
+
# USAGE:
|
|
10
|
+
# Copy this file to your project root as .ship-safeignore
|
|
11
|
+
# Then run: npx ship-safe scan .
|
|
12
|
+
|
|
13
|
+
# ── Examples ──────────────────────────────────────────────────────────────────
|
|
14
|
+
|
|
15
|
+
# Exclude a specific file
|
|
16
|
+
# config/seed-data.js
|
|
17
|
+
|
|
18
|
+
# Exclude a directory
|
|
19
|
+
# scripts/fixtures/
|
|
20
|
+
|
|
21
|
+
# Exclude all files matching a pattern
|
|
22
|
+
# **/*.example.js
|
|
23
|
+
# **/*.sample.*
|
|
24
|
+
|
|
25
|
+
# Exclude documentation that contains example credentials
|
|
26
|
+
# docs/
|
|
27
|
+
# *.md
|
|
28
|
+
|
|
29
|
+
# Exclude generated files
|
|
30
|
+
# generated/
|
|
31
|
+
# prisma/migrations/
|
|
32
|
+
|
|
33
|
+
# Exclude vendor/third-party code not in node_modules
|
|
34
|
+
# vendor/
|
|
35
|
+
# third-party/
|
|
36
|
+
|
|
37
|
+
# ── Common false positive sources ─────────────────────────────────────────────
|
|
38
|
+
|
|
39
|
+
# E2E test fixtures (ship-safe skips unit tests but not e2e by default)
|
|
40
|
+
# e2e/
|
|
41
|
+
# cypress/fixtures/
|
|
42
|
+
# playwright/
|
|
43
|
+
|
|
44
|
+
# Seed data with example values
|
|
45
|
+
# prisma/seed.ts
|
|
46
|
+
# database/seeds/
|
|
47
|
+
|
|
48
|
+
# Infrastructure-as-code with example configs
|
|
49
|
+
# terraform/examples/
|
|
50
|
+
# .terraform/
|