v1.4.0
This release adds signature exclusion reasons to your tartufo.toml
when using the quick action. Exclusion reasons are often documented with comments, but most toml parsers do not retain comments. To work around this, I have added a separate configuration object in which the exclusion reasons can be documented.
Generated tartufo.toml
files will now look like this:
[tool.tartufo]
repo-path = "."
cleanup = true
regex = true
entropy = true
exclude-path-patterns = ["tartufo.toml"]
exclude-signatures = [
"e7c7953f1d814374d50ab0ce75371a2145048318b6d41ee132680746298daf74",
]
[tool.tartufo.exclude-signature-reasons]
e7c7953f1d814374d50ab0ce75371a2145048318b6d41ee132680746298daf74 = "README.md: <Reason for exclusion>"