open/llm-security
1
0
Fork 0
Code Issues Releases 6 Activity

docs(ignore): drop the drifting suppressed/no-ignore counts from the header

Browse source 
Same choice as the README (previous commit): the 383 / 441 figures were
false one commit after they were written (git-forensics' 50-commit window).
Keeps the stable figure, 58 findings with the file, re-measured on the
release commit.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
Kjell Tore Guttormsen 2026-09-22 21:06:22 +02:00
commit 578ab8b176
Signed by: ktg
SSH key fingerprint: SHA256:JakMjO6FTBBzN0Bhfj9saOoEjaFxlSdYuZQQpM/lF9Q
1 changed files with 4 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

7
.llm-security-ignore
View file

@ -1,6 +1,6 @@
# .llm-security-ignore — Suppress expected findings when scanning this plugin
#
# Why 383 suppressed findings? A security plugin that documents attack patterns,
# Why so many suppressed findings? A security plugin that documents attack patterns,
# ships a malicious demo fixture, and tests against deliberately evil code will
# trigger its own scanners. This is the "scanning the scanner" paradox:
#
@ -10,8 +10,9 @@
# - hooks/ and scanners/ contain high-entropy regex for secret detection
#
# Every suppression below is explained. Run without this file to see all of them.
# Measured 2026-09-22 (v8.1.0) on a fresh clone: 441 findings without this file,
# 58 with it (383 suppressed).
# Measured 2026-09-22 (v8.1.1) on a fresh clone: 58 findings with this file.
# The suppressed count is not given: it changes with every commit, because
# git-forensics looks at the last 50 commits.
#
# Format: SCANNER:glob or just glob (applies to all scanners)
# Scanners: UNI, ENT, PRM, DEP, TNT, GIT, NET, MEM, SCR, WFL, TRG, SIG, AST, TFA