particle-os/debian-forge-composer
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

gitleaks: add allow list for test passwords and keys

Browse source 
Add a .gitleaks.toml file that lists all the test passwords and paths to
keys that should be ignored by the security scanner. This avoids false
positives so we can enable the scanner to catch actual leaks.

Closes #1747

Signed-off-by: Achilleas Koutsou <achilleas@koutsou.net>
This commit is contained in:
Achilleas Koutsou 2021-10-01 13:56:57 +02:00 • committed by Ondřej Budai
parent af784a11b1
commit 66b76c2ace
1 changed files with 10 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

10
.gitleaks.toml Normal file
View file

@ -0,0 +1,10 @@
[allowlist]
description = "Test keys and passwords that should not be reported as leaks"
regexes = [
'''\$6\$BhyxFBgrEFh0VrPJ\$MllG8auiU26x2pmzL4\.1maHzPHrA\.4gTdCvlATFp8HJU9UPee4zCS9BVl2HOzKaUYD\/zEm8r\/OF05F2icWB0K''', # qcow2 test manifest user password
'''\\\$6\\\$GRmb7S0p8vsYmXzH\\\$o0E020S\.9JQGaHkszoog4ha4AQVs3sk8q0DvLjSMxoxHBKnB2FBXGQ\/OkwZQfW\/76ktHd0NX5nls2LPxPuUdl\.''', # hashed user password for ostree tests
]
paths = [
'''test/data/keyring/id_rsa''', # boot test private key
'''internal/crypt/crypt_test.go''', # sample hashed passwords for testing crypt sniffer function
]