Hello Guys,
We are setting up Sonarcloud for our client which has currently Legacy Pricing tier. We want to discover secrets every time it is committed to the repository. We have enabled all quality rules to discover secrets that are committed to the repository. Sadly once they are committed they are not getting discovered. For example we have committed Databricks PAT token into the repo and Sonarcloud haven’t picked it up. All quality rules are enabled and linked to the the repository. Could it be that Sonarcloud is not discovering it due to Legacy Pricing tier?
Thanks guys for any answers
Can you provide an example (obfuscating the token, or at least making sure it is revoked)