Tool behavior to rule map
Use this page to decide whether a finding should come from Secretlint itself or from this plugin's ESLint rules.
| Concern | Source of truth | ESLint rule |
|---|---|---|
| Secret detection and masking behavior | Secretlint | secretlint/secretlint |
| Secretlint config filename | Repository policy | require-secretlint-config-file-naming-convention |
Top-level rules container | Repository policy | require-secretlint-rules-array |
| Rule IDs | Repository policy | require-secretlint-rule-id |
| Duplicate rule IDs | Repository policy | disallow-secretlint-duplicate-rules |
| Empty rule IDs | Repository policy | disallow-secretlint-empty-rule-id |
| Relative rule paths | Repository policy | disallow-secretlint-relative-rule-paths |
| Known rule object properties | Repository policy | disallow-secretlint-unknown-rule-properties |
allowMessageIds shape | Repository policy | prefer-secretlint-allow-message-ids-array |
Nested rules shape | Repository policy | prefer-secretlint-nested-rules-array |
| Installed rule packages | Repository environment | require-secretlint-rules-packages-installed |
If the issue changes what is considered a secret, let Secretlint own it. If the issue makes the Secretlint config easier to review and reuse across repositories, enforce it with this plugin.