From 4800484d41af17c288ef62a916d7931d8475ec88 Mon Sep 17 00:00:00 2001 From: Jorropo Date: Sun, 26 Jul 2026 10:26:27 +0200 Subject: [PATCH] lint: ignore userPrefs.jsonc in trunk (#11174) checkov/CKV_SECRET_6 flags the commented-out "large4cats" example, which is the public default credential for the meshtastic.org MQTT broker rather than a real secret. Ignore the file in .trunk/trunk.yaml so the example config stays free of lint-suppression comments. Co-authored-by: Claude Fable 5 --- .trunk/trunk.yaml | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/.trunk/trunk.yaml b/.trunk/trunk.yaml index 9b0c760bb..7bec30998 100644 --- a/.trunk/trunk.yaml +++ b/.trunk/trunk.yaml @@ -102,6 +102,13 @@ lint: - linters: [gitleaks] paths: - test/fixtures/nodedb/seed_v25_*.jsonl + # checkov/CKV_SECRET_6 flags the commented-out "large4cats" example, + # which is the public default credential for the meshtastic.org MQTT + # broker rather than a real secret. Ignore the whole file so the + # example config stays free of lint-suppression comments. + - linters: [ALL] + paths: + - userPrefs.jsonc # The UA font's em/en dashes live only in trailing comments documenting # each glyph's codepoint (e.g. "8212=:2549"); rewriting them would make # those docs inaccurate. Glyph byte data is unaffected either way.