.gitleaks-baseline.json That Suppressed Live Production Secrets
The impact of the .gitleaks-baseline.json file on suppressing live production secrets and remediation strategies.
Gitleaks is an effective tool for scanning secrets, but creating a .gitleaks-baseline.json file can inadvertently suppress live production secrets. This can lead developers to overlook security alerts. The baseline file marks previously existing secrets as 'known', potentially preventing the detection of new secrets. This article discusses how this issue surfaced during a security audit and how it was remediated.