Aikido .aikido exclude paths not matching - matching is string inclusion, not globs

TL;DR

Per Aikido docs: use literal path substrings in.aikido (no wildcards or regex) and record CVE ignores with a reason. Path matching in.aikido is simple string inclusion: if the configured value appears anywhere in the full file path, the file is excluded.

Steps

1. Per Aikido docs: use literal path substrings in.aikido (no wildcards or regex) and record CVE ignores with a reason.
2. Path matching in.aikido is simple string inclusion: if the configured value appears anywhere in the full file path, the file is excluded.

When to use

You are seeing this: Wildcards and regular expressions are not supported. Use this skill when you run into "Aikido .aikido exclude paths not matching - matching is string inclusion, not globs".

When not to use

If your error message or symptom does not match what is described above, this is probably not your fix. Search for your exact error text instead of forcing this one to fit.

Versions

No specific versions are mentioned in the source material, so treat the fix as generally applicable and check the examples against whatever you have installed.

Why this happens

The original report does not dig into a root cause. It documents the symptom and the fix that resolved it.

Source: Problem: Exclusions in the .aikido file do not match the files you expected. Path matching in .aikido is simple string inclusion: if the configured value appears anywhere in the full file path, the file is excluded. Wildcards and regular expressions are not supported. Place the .aikido file in the repository root. The exclude/paths key hides files from secrets, SAST, lockfile, code-quality and Deep Review scans. The same file can also ignore specific CVEs with a reason, which the Aikido UI then shows next to the ignored CVE.

Verified resolution: Per Aikido docs: use literal path substrings in .aikido (no wildcards or regex) and record CVE ignores with a reason.

Source URL: https://help.aikido.dev/code-scanning/scanning-practices/ignore-via-code-with-aikido-files.md