FileSystem ignores any files with name pattern "test*"

[game8149]

Description

Hi team, yesterday I was testing FS with scanning secrets on a folder with many subfolders. All was fine, with a lot of files at the beginning , the problem appears when I created a file named test.text with some true positives examples. The scanning didn´t detect it in any way.

I renamed to TestingOption.text, testData.text, and that didn´t work. Finally I renamed to OptionTest, and at last it worked.

Desired Behavior

Scan in files with name pattern test*.*

Actual Behavior

It didn't scan in files with name pattern test*.*

Reproduction Steps

1. Create a File name test.json and objectTest.json
2. Put some true positives in both files.
3. Use fs scan secrets. (it will ignore file test.json)

Target

Filesystem

Scanner

Secret

Output Format

JSON

Mode

Standalone

Debug Output

trivy fs --scanners secret  .

Operating System

Ubuntu

Version

0.59.1

Checklist

• Run trivy clean --all
• Read the troubleshooting

[knqyf263]

You can disable it.
https://trivy.dev/latest/docs/scanner/secret/#disable-rules

trivy/pkg/fanal/secret/builtin-allow-rules.go

Lines 4 to 8 in 50364b8

	{
	ID: "tests",
	Description: "Avoid test files and paths",
	Path: MustCompile(`(^(?i)test|\/test|-test|_test|\.test)`),
	},