Flag to keep false positives

[jonathongardner]

Description

When testing if a credential is no longer valid, Its helpful to keep false positives in the output to ensure the credential is still found and no longer valid.

Preferred Solution

A command flag to retain false positives truffelhog filesystem --retain-false-positives ....

Referencing this here

[rosecodym]

Does the --results flag accomplish what you're looking for? Adding

--results=verified,unverified,unknown,filtered_unverified

to your invocation should retain false positives in the output. Let me know if I'm misunderstanding the ask though.

[jonathongardner]

nope, thats it thanks!

We also run it with --no-filter-unverified sometimes, do we still need that? or would the --results=verified,unverified,unknown,filtered_unverified cover that?

Also are there any other possible results? looks like --help doesnt show any but its a little deceiving b/c it says default is all

[rosecodym]

Glad to help! You should keep using --no-filtered-unverified, as it controls a different method for filtering unverified results than --results=filtered_unverified. I can only apologize for our confusing nomenclature here.

There are no other results options. You're right about the help text being inaccurate; I'm going to open a PR to fix that.