hyperlane-registry/.gitleaks.toml at main · Sovereign-Labs/hyperlane-registry · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
# Global allowlist
[allowlist]
paths = [
    '''node_modules''',
    '''.git'''
]

# Custom rules
[[rules]]
id = "alchemy-api-key"
description = "Alchemy API Key"
regex = '''https://[a-zA-Z0-9-]+\.g\.alchemy\.com/v2/[a-zA-Z0-9_-]+'''
keywords = [
    "alchemy",
    "alchemy.com"
]
tags = ["key", "Alchemy"]

[[rules]]
id = "ankr-api-key"
description = "Ankr API Key"
regex = '''https://rpc\.ankr\.com/[a-zA-Z0-9_-]+/[a-zA-Z0-9_-]+'''
keywords = [
    "ankr",
    "rpc.ankr.com"
]
tags = ["key", "Ankr"]


[[rules]]
id = "tenderly-api-key"
description = "Tenderly API Key"
regex = '''https://[a-zA-Z0-9-]+\.gateway\.tenderly\.co/[a-zA-Z0-9_-]+'''
keywords = [
    "tenderly",
    "gateway.tenderly.co"
]
tags = ["key", "Tenderly"]

[[rules]]
id = "quicknode-api-key"
description = "QuickNode API Key"
regex = '''https://[a-zA-Z0-9-]+\.[a-zA-Z0-9-]+\.quiknode\.pro/[a-zA-Z0-9]+'''
keywords = [
    "quiknode",
    "quiknode.pro"
]
tags = ["key", "QuickNode"]

[[rules]]
id = "drpc-api-key"
description = "DRPC API Key"
regex = '''https://lb\.drpc\.org/[a-zA-Z0-9]+\?.*dkey=[a-zA-Z0-9]+'''
keywords = [
    "drpc",
    "drpc.org"
]
tags = ["key", "DRPC"]

[[rules]]
id = "dwellir-api-key"
description = "Dwellir API Key"
regex = '''https://api-.*\.dwellir\.com/[a-zA-Z0-9-]+'''
keywords = [
    "dwellir",
    "dwellir.com"
]
tags = ["key", "Dwellir"]

[[rules]]
id = "startale-api-key"
description = "Startale API Key"
regex = '''https://[a-zA-Z0-9.-]+\.startale\.com.*[\?&]apikey=[a-zA-Z0-9]+'''
keywords = [
    "startale",
    "startale.com"
]
tags = ["key", "Startale"]

[[rules]]
id = "grove-city-api-key"
description = "Grove City API Key"
regex = '''https://[a-zA-Z0-9-]+\.rpc\.grove\.city/v1/[a-zA-Z0-9]+'''
keywords = [
    "grove",
    "grove.city"
]
tags = ["key", "Grove City"]

[[rules]]
id = "ccvalidators-api-key"
description = "CryptoCrew API Key"
regex = '''https://(rpc|grpc|rest)\.[a-zA-Z0-9-]+\.ccvalidators\.com:?[0-9]*/?[a-zA-Z0-9-]*'''
keywords = [
    "ccvalidators",
    "ccvalidators.com"
]
tags = ["key", "Crypto Crew"]

[[rules]]
id = "ccnodes-api-key"
description = "CryptoCrew Nodes API Key"
regex = '''https://[a-zA-Z0-9-]+\.[a-zA-Z0-9-]+\.ccnodes\.com:?[0-9]*/?[a-zA-Z0-9-]*'''
keywords = [
    "ccnodes",
    "ccnodes.com"
]
tags = ["key", "Crypto Crew Nodes"]

[[rules]]
id = "svm-cli-private-key"
description = "Solana CLI private key"
regex = '''\[[\s]*(?:\d{1,3}[\s]*,[\s]*){63}\d{1,3}[\s]*\]'''
tags = ["private key", "svm"]

[[rules]]
id = "svm-base58-private-key"
description = "Solana wallet private key"
regex = '''\b[1-9A-HJ-NP-Za-km-z]{87,88}\b'''
tags = ["private key", "svm"]

# Not testing evm, starknet or cosmos private key as
# they might trigger false positives with transaction hashes