gitleaks.toml

title = "Invoice Liquidity Network gitleaks config"

[extend]
useDefault = true

[allowlist]
paths = [
  '''(^|/)\.secrets\.baseline$''',
  '''(^|/)gitleaks\.toml$''',
]

[[rules]]
id = "stellar-secret-seed"
description = "Detect committed Stellar secret seeds beginning with an 'S'."
regex = '''\bS[A-Z2-7]{55}\b'''
tags = ["stellar", "secret", "seed"]
entropy = 3.5

[[rules]]
id = "ethereum-private-key"
description = "Detect Ethereum private keys in hex format."
regex = '''\b(?:0x)?[a-f0-9]{64}\b'''
tags = ["ethereum", "private-key"]
entropy = 3.5

[[rules]]
id = "aws-credential"
description = "Detect AWS credentials such as access key IDs used by AWS SDKs."
regex = '''\b(?:A3T[A-Z0-9]{16}|AKIA[A-Z0-9]{16}|ASIA[A-Z0-9]{16}|ABIA[A-Z0-9]{16}|ACCA[A-Z0-9]{16})\b'''
tags = ["aws", "credential"]
entropy = 3

[[rules]]
id = "generic-api-token"
description = "Detect generic API tokens or bearer tokens that look like secrets."
regex = '''(?i)\b(?:api[_-]?key|api[_-]?token|secret[_-]?key|private[_-]?key|bearer[_-]?token|access[_-]?token)\b\s*[=:]\s*['\"]?[A-Za-z0-9\-_]{20,120}['\"]?'''
tags = ["api", "token", "secret"]
entropy = 3