feat: add exclude-entropy-patterns

[dclayton-godaddy]

Add the ability to exclude entropy patterns. This will allow flagged entropy rules using regular expressions for all files or specific files.

To help us get this pull request reviewed and merged quickly, please be sure to include the following items:

• Tests (if applicable)
• Documentation (if applicable)
• Changelog entry
• A full explanation here in the PR description of the work done

PR Type

What kind of change does this PR introduce?

• Bugfix
• Feature
• Code style update (formatting, local variables)
• Refactoring (no functional changes, no api changes)
• Build related changes
• CI related changes
• Documentation content changes
• Tests
• Other

Backward Compatibility

Is this change backward compatible with the most recently released version? Does it introduce changes which might change the user experience in any way? Does it alter the API in any way?

• Yes (backward compatible)
• No (breaking changes)

Issue Linking

What's new?

• added exclude-entropy-patterns option

[dclayton-godaddy]

ci / tox (windows-latest, 3.6) (pull_request)fails on main build as well. See https://github.com/godaddy/tartufo/runs/2805575957?check_suite_focus=true

[tarkatronic]

ci / tox (windows-latest, 3.6) (pull_request)fails on main build as well. See https://github.com/godaddy/tartufo/runs/2805575957?check_suite_focus=true

This is unrelated to your changes. I've been doing some hunting and found tox-dev/tox#2077 and tox-dev/tox#1570. Unfortunately neither of those have a solution. But I have a suspicion as to what might be causing it; I added environment caching yesterday. The run that initially primed the cache passed, but subsequent runs have failed. I don't know why this would only trigger on windows/3.6, but I'm going to try digging into that separately.

With that in mind, I don't think we need to consider that a blocker for this PR.

[tarkatronic]

This is great! I love the new feature; this will be a huge help to our users.

I just have 2 small changes I flagged (and one that's more of a knowledge share than anything), and then we should be able to get this merged in!

[rbailey-godaddy]

Looks okay to me.

I spent a few minutes thinking about whether it is proper to limit these exclusions only to entropy-based detection, or if instead they should be allowed to apply to regex-based alerts as well. (i.e. basically --exclude-patterns instead of --exclude-entropy-patterns) I can't convince myself one way or the other is obviously better, so I'd vote for letting the proposed implementation stand.

[sushantmimani]

LGTM 🦅