Bh/update whitesource config (#4004)

* Update whitesource config to include specifically what we package for release

Signed-off-by: Brian Hussey <brian.hussey@ie.ibm.com>

* Update latest secrets

Signed-off-by: Brian Hussey <brian.hussey@ie.ibm.com>

---------

Signed-off-by: Brian Hussey <brian.hussey@ie.ibm.com>

Author: brian-hussey

.secrets.baseline

@@ -3,7 +3,7 @@
     "files": "package-lock.json|Cargo.lock|^.secrets.baseline$|scripts/sign_image.sh|scripts/zap|sonar-project.properties|^/Users/brian/dev/github.ibm.com/contextforge-org/sps-pipeline-config/.secrets.baseline$|^./.secrets.baseline$",
     "lines": null
   },
-  "generated_at": "2026-04-03T08:21:47Z",
+  "generated_at": "2026-04-03T10:38:44Z",
   "plugins_used": [
     {
       "name": "AWSKeyDetector"

whitesource.config

@@ -1,3 +1,19 @@
+###############################################################
+# Mend Unified-Agent configuration file
+###############################################################
+# GENERAL SCAN MODE: Files and Package Managers
+###############################################################
+###########
+# General #
+###########
+#Every subsequent scan attempt after the first needs APPEND so that we are not overriding the previous scan.
+updateType=OVERRIDE # APPEND or OVERRIDE
+#log.level=info
+#log.level=debug
+
+#checkPolicies = true
+#offline = true
+
 python.path=python3.11
 python.pipPath=pip3
 python.ignorePipInstallErrors=true
@@ -7,5 +23,9 @@ python.runPipenvPreStep=true
 python.pipenvDevDependencies=true
 python.IgnorePipenvInstallErrors=true
 
-includes = mcpgateway/** pyproject.toml Containerfile.lite
-excludes = **/tests/** **/charts/** **/deployment/** **/docs/** **/deployment/k8s/** **/mcp-servers/** **/agent_runtimes/**
+###########################################################################################
+# Includes/Excludes Glob patterns - Please use only one exclude line and one include line #
+###########################################################################################
+
+includes = **/mcpgateway/** **/plugins/** **/plugins_rust/encoded_exfil_detection/** pyproject.toml Containerfile.lite
+excludes = **/tests/** **/charts/** **/deploy/** **/deployment/** **/docs/** **/deployment/k8s/** **/mcp-servers/** ****/a2a-agents/** **/agent_runtimes/** **/infra/** **/plugin_templates/** **/scripts/** **/tools_rust/**