.gitea/workflows/build.yml

@@ -45,7 +45,8 @@ jobs:
             /d:sonar.coverage.exclusions="**/Migrations/**/*.cs,**/*ModelSnapshot.cs,**/Migrations/*.cs,**/Program.cs" \
             /d:sonar.exclusions="**/Migrations/**/*.cs,**/obj/**,**/bin/**,**/TestResults/**" \
             /d:sonar.cpd.exclusions="**/Migrations/**/*.cs" \
-            /d:sonar.test.inclusions="**/*Tests.cs,**/ChatBot.Tests/**/*.cs"
+            /d:sonar.test.inclusions="**/*Tests.cs,**/ChatBot.Tests/**/*.cs" \
+            /d:sonar.security.hotspots.excluded="**/Models/Configuration/**/*.cs"
           echo "Building project..."
           dotnet build --verbosity normal --no-incremental
           echo "Running tests with coverage..."

.sonarqube/exclusions.txt

@@ -12,6 +12,9 @@
 **/bin/**
 **/TestResults/**
 
+## Security Hotspots Exclusions (sonar.security.hotspots.excluded)
+**/Models/Configuration/**/*.cs
+
 ## Source and Test Directories
 Sources: ChatBot/
 Tests: ChatBot.Tests/
@@ -21,3 +24,4 @@ Tests: ChatBot.Tests/
 - ModelSnapshot: Auto-generated EF Core snapshot
 - obj/bin: Build artifacts
 - TestResults: Test execution results
+- Configuration Models: Safe usage of environment variables for secrets (BotToken, ConnectionString)