From 4ce4df1e877675b511af08be7a1f5506ad1ad7ee Mon Sep 17 00:00:00 2001 From: Barak Amar Date: Tue, 8 Dec 2020 11:23:09 +0200 Subject: [PATCH] Fix gitleaks configuration (#950) --- .github/workflows/go.yaml | 4 +++- .gitleaks.toml | 13 ++++++------- 2 files changed, 9 insertions(+), 8 deletions(-) diff --git a/.github/workflows/go.yaml b/.github/workflows/go.yaml index a8c94d47115..7b146dbc1dd 100644 --- a/.github/workflows/go.yaml +++ b/.github/workflows/go.yaml @@ -11,6 +11,8 @@ jobs: steps: - name: Check-out code uses: actions/checkout@v2 + with: + fetch-depth: '1' - name: Setup Go uses: actions/setup-go@v2 with: @@ -23,7 +25,7 @@ jobs: env: GOLANGCI_LINT_FLAGS: --out-format github-actions - name: gitLeaks - uses: zricethezav/gitleaks-action@v1.1.2 + uses: zricethezav/gitleaks-action@v1.1.4 test: name: Run Test Suite diff --git a/.gitleaks.toml b/.gitleaks.toml index 14960fbbd73..f1f34647483 100644 --- a/.gitleaks.toml +++ b/.gitleaks.toml @@ -4,12 +4,11 @@ title = "gitleaks config" description = "AWS Manager ID" regex = '''(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}''' tags = ["key", "AWS"] - [[rules.allowlist]] - regex = '''(AKIAIOSFODNN7EXAMPLE|AKIAIO5FODNN7EXAMPLE|AKIA6HHRMQLJMDVXY6OR|AKIAIOSFODNN3EXAMPLE|AKIAIOSFODNS3EXAMPLE|AKIAIOSFOLAKEEXAMPLE|AKIAJ5SI5UWYOAXGHOXQ|AKIAJF2VSETNW3RTP3ZQ|AKIAJF4EV2DBC56IOAOQ|AKIAJIEMTME6UEVWXB2Q|AKIAJKKRUNSYM5MZSHDQ|AKIAJKLO4PDKEBQUDHYQ|AKIAJLQLVNL2XZ7EH6RQ|AKIAJNYOQZSWBSSXURPQ|AKIAJTZZYQTU5YGV4O3Q|AKIAJV3OAIYRIVODAQVQ|AKIAJVD5P3WTAFH7IN5Q|AKIAJXQPFV4FZH7UMMAQ|AKIAYRJJ6GNGCYQEPB7A).*''' - description = "ignore some aws keys" + [rules.allowlist] + description = "ignore some aws keys" + regex = '''(AKIAIOSFODNN7EXAMPLE|AKIAIO5FODNN7EXAMPLE|AKIA6HHRMQLJMDVXY6OR|AKIAIOSFODNN3EXAMPLE|AKIAIOSFODNS3EXAMPLE|AKIAIOSFOLAKEEXAMPLE|AKIAJ5SI5UWYOAXGHOXQ|AKIAJF2VSETNW3RTP3ZQ|AKIAJF4EV2DBC56IOAOQ|AKIAJIEMTME6UEVWXB2Q|AKIAJKKRUNSYM5MZSHDQ|AKIAJKLO4PDKEBQUDHYQ|AKIAJLQLVNL2XZ7EH6RQ|AKIAJNYOQZSWBSSXURPQ|AKIAJTZZYQTU5YGV4O3Q|AKIAJV3OAIYRIVODAQVQ|AKIAJVD5P3WTAFH7IN5Q|AKIAJXQPFV4FZH7UMMAQ|AKIAYRJJ6GNGCYQEPB7A).*''' [allowlist] - description = "Allowlisted files" - files = ['''^\.?gitleaks.toml$''', - '''(.*?)(jpg|gif|doc|pdf|bin)$''', - '''(go.mod|go.sum)$'''] \ No newline at end of file + description = "Allowlisted files" + files = [ '''^\.?gitleaks.toml$''', '''(.*?)(jpg|gif|doc|pdf|bin)$''', '''(go.mod|go.sum)$'''] +