Jose
ac3e5e55c6
All checks were successful
ansible-lint / Ansible Lint (push) Successful in 11s
Gitleaks Scan / gitleaks (push) Successful in 5s
ai-reviews / Review PR (pull_request) Successful in 33s
Markdown Lint / markdown-lint (push) Successful in 5s
PR check / Gitleaks (pull_request) Successful in 4s
PR check / lint tests (pull_request) Successful in 14s
PR check / handle_failures (pull_request) Has been skipped
PR check / handle_success (pull_request) Successful in 1s
Lowered the entropy threshold in the README.md to more accurately detect generic API keys, improving documentation clarity and user experience.
48 lines
1.3 KiB
TOML
48 lines
1.3 KiB
TOML
title = "Gitleaks Config"
|
|
|
|
# ==========================
|
|
# Allowlist / False Positive Rules
|
|
# ==========================
|
|
# [[allowlist]]
|
|
# description = "Ignore placeholder secrets in README.md"
|
|
# filepath = "README.md"
|
|
# # Add all placeholder-like patterns that trigger false positives
|
|
# regex = "cafebabe|deadbeef|DB_PASSWORD"
|
|
|
|
# [[allowlist]]
|
|
# description = "Ignore badge URLs in README"
|
|
# filepath = "README.md"
|
|
# regex = "https://img.shields.io"
|
|
|
|
# ==========================
|
|
# Rules
|
|
# ==========================
|
|
# [[rules]]
|
|
# id = "generic-api-key"
|
|
# description = "Generic API Key"
|
|
# regex = "(?i)(api[_-]?key|secret|token)=\\S+"
|
|
# entropy = 3.5
|
|
|
|
# [[rules]]
|
|
# id = "sidekiq-secret"
|
|
# description = "Sidekiq Secret"
|
|
# regex = "export BUNDLE_ENTERPRISE__CONTRIBSYS__COM=\\S+"
|
|
# entropy = 2.5
|
|
|
|
# ==========================
|
|
# File-specific entropy overrides
|
|
# ==========================
|
|
[[rules]]
|
|
id = "generic-api-key-docs"
|
|
description = "Ignore placeholder secrets in README.md"
|
|
regex = "(?i)(api[_-]?key|secret|token)=\\S+"
|
|
filepath = "README.md"
|
|
entropy = 5.0 # high threshold, placeholders won't trigger
|
|
|
|
[[rules]]
|
|
id = "sidekiq-secret"
|
|
description = "Sidekiq Secret in README.md"
|
|
regex = "export BUNDLE_ENTERPRISE__CONTRIBSYS__COM=\\S+"
|
|
filepath = "README.md"
|
|
entropy = 5.0
|