Attributed metadata history
Up to 100 retained publisher events per page for c15f54fac35cdb401cb89ecc8937e09bb4cdd519a54e8f3b8fecff8ab14a8714. Withdrawals and unavailable references remain attributed to their publishers.
intelligence_src_73ba0793d1fe5583a7
observed · 2026-10-12 11:27:03 UTC
Highlights v13 changes how files are discovered on disk and adds three credential detection rules. .gitignore is respected by default Nested .gitignore files now apply to file discovery with ripgrep semantics: rules from each directory cascade into its subtree, and a negation rule in a deeper file can flip an earlier verdict. Files excluded by any .gitignore on the path are no longer scanned. Repositories that previously relied on Secretlint scanning ignored files (such as dist/ or generated artefacts) will see fewer files in the output. .secretlintignore is unchanged and continues to apply alongside .gitignore. To restore the v12 behaviour: secretlint --no-gitignore "**/*" If a file is matched by a .gitignore rule but still appears in Secretlint's output, please open an issue at https://github.com/secretlint/secretlint/issues. Glob-shaped paths that exist on disk are treated literally --no-glob and "globs by default" both existed in v12. What changed in v13 is the fallback for inputs that contain glob metacharacters but resolve to a real file or directory. In v12, an input like src/(group)/page.tsx was always parsed as a glob, so SvelteKit / Next.js routes whose names contain (),
Fingerprint: 91e29f44fb745f7ffab99e08026f34160f2e3388ebb0700659c58751a910eaf5
intelligence_src_73ba0793d1fe5583a7
observed · 2026-10-12 11:27:03 UTC
available
Fingerprint: b2e24f21bbc547091872d654bab5ff5d2ee404bd9406079219325769759e0ec6