Jose
64aec59295
All checks were successful
ansible-lint / Ansible Lint (push) Successful in 13s
Gitleaks Scan / gitleaks (push) Successful in 4s
Markdown Lint / markdown-lint (push) Successful in 5s
ai-reviews / Review PR (pull_request) Successful in 44s
PR check / Gitleaks (pull_request) Successful in 5s
PR check / lint tests (pull_request) Successful in 14s
PR check / handle_failures (pull_request) Has been skipped
PR check / handle_success (pull_request) Successful in 1s
This commit adds a new section to the README.md file, detailing how to detect and secure Sidekiq secrets within an application.
48 lines
1.2 KiB
TOML
48 lines
1.2 KiB
TOML
title = "Gitleaks Config"
|
|
|
|
# ==========================
|
|
# Allowlist / False Positive Rules
|
|
# ==========================
|
|
# [[allowlist]]
|
|
# description = "Ignore placeholder secrets in README.md"
|
|
# filepath = "README.md"
|
|
# # Add all placeholder-like patterns that trigger false positives
|
|
# regex = "cafebabe|deadbeef|DB_PASSWORD"
|
|
|
|
# [[allowlist]]
|
|
# description = "Ignore badge URLs in README"
|
|
# filepath = "README.md"
|
|
# regex = "https://img.shields.io"
|
|
|
|
# ==========================
|
|
# Rules
|
|
# ==========================
|
|
[[rules]]
|
|
id = "generic-api-key"
|
|
description = "Generic API Key"
|
|
regex = "(?i)(api[_-]?key|secret|token)=\\S+"
|
|
entropy = 3.5
|
|
|
|
[[rules]]
|
|
id = "sidekiq-secret"
|
|
description = "Sidekiq Secret"
|
|
regex = "export BUNDLE_ENTERPRISE__CONTRIBSYS__COM=\\S+"
|
|
entropy = 2.5
|
|
|
|
# ==========================
|
|
# File-specific entropy overrides
|
|
# ==========================
|
|
[[rules]]
|
|
id = "generic-api-key-docs"
|
|
description = "Ignore placeholder secrets in README.md"
|
|
regex = "(?i)(api[_-]?key|secret|token)=\\S+"
|
|
filepath = "README.md"
|
|
entropy = 10.0 # very high threshold, placeholders won't trigger
|
|
|
|
[[rules]]
|
|
id = "sidekiq-secret"
|
|
description = "Sidekiq Secret in README.md"
|
|
regex = "export BUNDLE_ENTERPRISE__CONTRIBSYS__COM=\\S+"
|
|
filepath = "README.md"
|
|
entropy = 5.5
|