forked from Lex-Studios/Stellar-Spend
-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy path.gitleaks.toml
More file actions
124 lines (96 loc) · 3.99 KB
/
Copy path.gitleaks.toml
File metadata and controls
124 lines (96 loc) · 3.99 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
title = "Gitleaks Configuration"
[extend]
useDefault = true
[allowlist]
description = "Allowlist for false positives and test fixtures"
paths = [
'''\.env\.example$''',
'''\.env\.sample$''',
'''\.env\.template$''',
'''tests/fixtures/.*''',
'''__snapshots__/.*''',
'''\.example$''',
'''docs/.*\.md$''',
'''README\.md$''',
'''CONTRIBUTING\.md$''',
'''SECURITY\.md$''',
'''package-lock\.json$''',
]
[[allowlist.regexes]]
description = "Placeholder values in env files"
regex = '''(your_|YOUR_|REPLACE_|replace_|CHANGE_|change_|INSERT_|insert_|ENTER_|enter_)[a-zA-Z0-9_]*'''
[[allowlist.regexes]]
description = "Test/example API keys"
regex = '''(test_|TEST_|example_|EXAMPLE_|sample_|SAMPLE_|dummy_|DUMMY_|fake_|FAKE_|mock_|MOCK_)[a-zA-Z0-9_]*(key|token|secret|password|api_key)'''
[[allowlist.regexes]]
description = "Public Stellar account IDs (G...)"
regex = '''G[A-Z0-9]{55}'''
[[allowlist.regexes]]
description = "Public Stellar contract IDs (C...)"
regex = '''(CA|CD|C)[A-Z0-9]{55}'''
[[allowlist.regexes]]
description = "Public Base addresses (0x...)"
regex = '''0x[a-fA-F0-9]{40}'''
[[allowlist.regexes]]
description = "Sentry public DSN"
regex = '''https://[a-f0-9]{32}@[a-z0-9]+\.ingest\.sentry\.io/\d+'''
[[allowlist.regexes]]
description = "Public RPC endpoints"
regex = '''https?://(rpc|soroban|horizon|api)\.[a-zA-Z0-9-]+\.(stellar|gateway|fm|org|com)'''
[[allowlist.regexes]]
description = "Public CDN URLs"
regex = '''https?://(cdn|d\d+)\.(jsdelivr|cloudfront|unpkg)\.(net|com)'''
[[allowlist.regexes]]
description = "Example/test passwords"
regex = '''(password|passwd|pwd)["\s:=]+["\s]*(test|password|secret|changeme|example)["\s]*$'''
[[allowlist.regexes]]
description = "Generic test credentials in comments"
regex = '''\/\/.*(test|example|sample|dummy|fake|mock).*(key|token|secret|password|credential)'''
[[allowlist.regexes]]
description = "Public blockchain explorers"
regex = '''https?://(etherscan|basescan|stellar\.org|stellarchain)\.(io|org)/.*'''
[[allowlist.regexes]]
description = "Public Stellar testnet URLs"
regex = '''https?://(friendbot|laboratory)\.stellar\.org.*'''
[[allowlist.regexes]]
description = "Public Base documentation"
regex = '''https?://(docs|developers)\.base\.org.*'''
[[allowlist.regexes]]
description = "Generic placeholder patterns"
regex = '''(your_|YOUR_|REPLACE_|replace_|CHANGE_|change_|INSERT_|insert_|ENTER_|enter_|FILL_|fill_)[a-zA-Z0-9_]*'''
[[allowlist.regexes]]
description = "Environment variable examples"
regex = '''^[A-Z_]+=(your_|YOUR_|REPLACE_|replace_|CHANGE_|change_|INSERT_|insert_|ENTER_|enter_|FILL_|fill_|test_|TEST_|testing_|TESTING_)'''
[[allowlist.regexes]]
description = "Public Stellar ecosystem URLs"
regex = '''https?://(lobstr|keybase|stellarport|stomt|stellarexpert)\..*'''
[[allowlist.regexes]]
description = "Public Base ecosystem URLs"
regex = '''https?://(base\.org|base\.com|coinbase\.com|warpcast\.com|onchain\.base\.org)'''
[[allowlist.regexes]]
description = "Generic test environment variables"
regex = '''^(TEST_|TESTING_|TEST)[A-Z0-9_]+='''
[[allowlist.regexes]]
description = "Public Alchemy/Infura/QuickNode URLs"
regex = '''https?://(alchemy|infura|quicknode)\.(com|in|io)/.*'''
[[allowlist.regexes]]
description = "Public Stellar asset codes"
regex = '''\b(USDC|XLM|AQUA|yUSDC|USDT)\b'''
[[allowlist.regexes]]
description = "Generic short hex strings"
regex = '''^0x[a-fA-F0-9]{0,8}$'''
[[allowlist.regexes]]
description = "Generic UUIDs"
regex = '''[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}'''
[[allowlist.regexes]]
description = "Public GitHub URLs"
regex = '''https?://github\.com/[A-Za-z0-9_-]+/[A-Za-z0-9_.-]+'''
[[allowlist.regexes]]
description = "Public npm packages"
regex = '''"(?:@[a-z0-9-]+\/)?[a-z0-9-]+"'''
[[allowlist.regexes]]
description = "Generic version numbers"
regex = '''\b\d+\.\d+\.\d+(-[a-zA-Z0-9.]+)?\b'''
[[allowlist.regexes]]
description = "Public Stellar network passphrases"
regex = '''(Test SDF Network ; September 2015|Public Global Stellar Network ; September 2015)'''