From 67b71a52d1f7aea31880a02a1be7b5e14f6f8326 Mon Sep 17 00:00:00 2001 From: jubnl Date: Tue, 25 Aug 2026 00:11:58 +0200 Subject: [PATCH] chore(sonar): stop secret detectors false-positiving on locale files --- sonar-project.properties | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/sonar-project.properties b/sonar-project.properties index b70c88cc2..3e6241fe7 100644 --- a/sonar-project.properties +++ b/sonar-project.properties @@ -53,3 +53,14 @@ sonar.coverage.exclusions=\ # Locale files are large near-identical literal objects — keep them out of duplication metrics sonar.cpd.exclusions=shared/src/i18n/** + +# Locale files are UI copy — strings like "Password", "API key", "token" are labels, +# not credentials, and the secret detectors false-positive on them constantly. +# Ignore the secrets analyzer and the hard-coded-credential rules on i18n only. +sonar.issue.ignore.multicriteria=i18nsec1,i18nsec2,i18nsec3 +sonar.issue.ignore.multicriteria.i18nsec1.ruleKey=secrets:* +sonar.issue.ignore.multicriteria.i18nsec1.resourcePattern=shared/src/i18n/** +sonar.issue.ignore.multicriteria.i18nsec2.ruleKey=typescript:S2068 +sonar.issue.ignore.multicriteria.i18nsec2.resourcePattern=shared/src/i18n/** +sonar.issue.ignore.multicriteria.i18nsec3.ruleKey=typescript:S6418 +sonar.issue.ignore.multicriteria.i18nsec3.resourcePattern=shared/src/i18n/**