vinez/bambuddy
1
0
Fork 0
mirror of https://github.com/maziggy/bambuddy.git synced 2026-08-11 00:30:12 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

Added gitleaks

Browse source
This commit is contained in:
maziggy 2026-04-22 20:21:33 +02:00
parent d52b91ca5a
commit 9a38414be9
1 changed files with 10 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

11
.gitleaks.toml
View file

@ -18,7 +18,8 @@ tags = ["credentials", "url"]
[rules.allowlist]
# Skip well-known dummy/example creds that legitimately appear in docs
# and test fixtures. Extend as new false positives show up.
# and test fixtures, and template-literal interpolations in source code
# (e.g. `http://${user}:${password}@...` — not an actual credential).
regexes = [
'''https?://user:pass(word)?@''',
'''https?://admin:admin@''',
@ -27,6 +28,10 @@ regexes = [
'''https?://foo:bar@''',
'''https?://[^:]+:password@''',
'''https?://[^:]+:secret@''',
# JS template literal http://${user}:${password}@
'''https?://\$\{[^}]+\}:\$\{[^}]+\}@''',
# Python f-string http://{username}:{password}@
'''https?://\{[^}]+\}:\{[^}]+\}@''',
]
# ── Global allowlist ─────────────────────────────────────────────────────
@ -39,4 +44,8 @@ paths = [
'''frontend/node_modules/.*''',
'''backend/tests/fixtures/.*''',
'''static/assets/.*''', # bundled frontend build output (minified JS/CSS)
# Historical log file (deleted in working tree, still in git history).
# Credentials inside have been rotated; allowlisted to keep future scans
# from re-surfacing them as noise.
'''bambutrack\.log\.1$''',
]