Skip to main content


The ignore command allows you to ignore some secrets.

For the time being, it only handles the --last-found option that ignore all secrets found by the last run scan command. Under the hood, these secrets are added to the matches-ignore section of your local configuration file (if no local configuration file is found, a .gitguardian.yaml file is created).

Usage: ggshield ignore
  Command to ignore all secrets found by the previous scan.
Options:  -h, --help                 Show this message and exit.  --last-found               Ignore all secrets found by last run scan

Warning: Using this command will discard any comments present in the config file.

Note: ggshield does not share its ignored secrets with the dashboard. Therefore, if you have integrated a repository in the dashboard and are using ggshield on this same repository:

  • a secret ignored on ggshield will still show as a potential incident on your GitGuardian dashboard.
  • a secret ignored on the dashboard will be ignored by ggshield.