wehub-resource-sync
36 lines
726 B
TOML
36 lines
726 B
TOML
title = "gitleaks config"
|
|
|
|
[[rules]]
|
|
id = "generic-api-key"
|
|
description = "Generic API Key"
|
|
path = '''.py'''
|
|
regex = '''(?i)((key|api|token|secret|password)[a-z0-9_ .\-,]{0,25})(=|>|:=|\|\|:|<=|=>|:).{0,5}['\"]([0-9a-zA-Z\-_=]{8,64})['\"]'''
|
|
secretGroup = 4
|
|
entropy = 3.7
|
|
|
|
[allowlist]
|
|
description = "global allow lists"
|
|
paths = [
|
|
'''gitleaks.toml''',
|
|
'''(.*?)(jpg|gif|doc|pdf|bin|svg|socket)$''',
|
|
'''(go.mod|go.sum)$'''
|
|
]
|
|
regexes = [
|
|
'''219-09-9999''',
|
|
'''078-05-1120''',
|
|
'''(9[0-9]{2}|666)-\d{2}-\d{4}''',
|
|
'''process''',
|
|
'''getenv''',
|
|
'''\.env''',
|
|
'''env\(''',
|
|
'''env\.''',
|
|
'''setting''',
|
|
'''load''',
|
|
'''token''',
|
|
'''password''',
|
|
'''secret''',
|
|
'''api\_key''',
|
|
'''apikey''',
|
|
'''api\-key''',
|
|
]
|