Support disabling comments on the next line

[paddyroddy]

It would be good to be able to support comments in the standard inline # zizmor: ignore[] as well as something like # zizmor: ignore-next-line[]. Akin to something that markdownlint does https://github.com/davidanson/markdownlint#configuration.

I am currently trying to suppress the SAFE_SETTINGS_GITHUB_CLIENT_SECRET secret here without the line getting really long.

      - name: Run application
        run: npm run full-sync
        env:
          GITHUB_CLIENT_SECRET:
            ${{ secrets.SAFE_SETTINGS_GITHUB_CLIENT_SECRET }}

[woodruffw]

Hi @paddyroddy, thanks for opening a discussion.

I'm pretty hesitant to add a "next line" ignore feature because it's architecturally complicated/doesn't mesh well with how zizmor "sees" the files it analyzes (it's not so much "line-aware" as "span-aware", so line-jumping is relatively inefficient and awkward).

With that said, I think the (unreleased) changes in #1759 will also help you here -- you'll be able to configure SAFE_SETTINGS_GITHUB_CLIENT_SECRET as explicitly allowed in the next release, with no ignore comment required. Let me know if that would address your use case!

It would be good to be able to support comments in the standard inline # zizmor: ignore[]

Could you say a bit more about this? zizmor does support this, in the sense that trailing data is explicitly ignored, e.g. # zizmor: ignore[rule] my explanation explicitly ignores my explanation.

[paddyroddy]

Ah thanks, #1759 looks like it would be useful here.

Could you say a bit more about this?

Sorry my wording wasn't clear here. I meant that along with standard inline comments, I was wondering about next line etc. But if that's not possible then no problem.