[Bug] False positive security flag on legitimate backup automation scripts

Status Open
Reported on v2.1.220
Maintainer reply None cached
Activity 0 comments · opened Jul 29, 2026

Bug Description
False positive — legitimate backup automation blocked. Context: I'm building automated backups for my own web infrastructure. - 3 servers that I own and fully control. Access credentials are stored in the project's .env file and read by the tool only when needed. - Scripts perform regular database dumps and file backups, then transfer the archives to a remote storage destination (also configured in .env). - The target website and all servers are mine; access is fully authorized and legal. This is standard disaster-recovery / backup automation: my own data, moved to my own storage. No third-party systems, no unauthorized access, no data exfiltration — just routine backups (rsync/restic/rclone-style workflow). Please refine the safeguard so it stops flagging legitimate backup pipelines. Request ID: req_011CdWK9DUCqfbFPotqXL7LR

Environment Info

  • Platform: darwin
  • Terminal: iTerm.app
  • Version: 2.1.220
  • Feedback ID: 7491e50c-e083-483b-a30f-2aa060753b99

Errors

[]

View original on GitHub ↗