What is the purpose of paths-ignore in secret scanning configuration?

• A. Excludes files from being scanned for secrets
• B. Enables scanning only on binary files
• C. Forces scanning on all files regardless of path
• D. Logs scans for auditing

Answer: (A)

Paths-ignore is used to specify files and directories that should be skipped by secret scanning. By listing these patterns, the scanner won’t inspect any matching paths for secrets, allowing you to skip generated, vendor, or other non-source files. This focuses the scan on relevant parts of the repository and can save time and reduce noise. It doesn’t enable scanning only on binary files, nor does it force scanning across all files or log scans for auditing—those are different settings or features.