leave330
fcdef499bb
Skill Format Check / check-format (push) Has been cancelled
CI / security (push) Has been cancelled
CI / license-header (push) Has been cancelled
CI / fast-gate (push) Has been cancelled
CI / unit-test (push) Has been cancelled
CI / plugin-integration (push) Has been cancelled
CI / sidecar-integration (push) Has been cancelled
CI / lint (push) Has been cancelled
CI / script-test (push) Has been cancelled
CI / deterministic-gate (push) Has been cancelled
CI / coverage (push) Has been cancelled
CI / deadcode (push) Has been cancelled
CI / e2e-dry-run (push) Has been cancelled
CI / e2e-live (push) Has been cancelled
CI / results (push) Has been cancelled
30 lines
902 B
TOML
30 lines
902 B
TOML
title = "lark-cli gitleaks config"
|
|
|
|
[extend]
|
|
useDefault = true
|
|
|
|
# Extends the default rule of the same id: the base regex is kept and this
|
|
# allowlist is appended to that rule only, leaving every other rule untouched.
|
|
[[rules]]
|
|
id = "generic-api-key"
|
|
|
|
[[rules.allowlists]]
|
|
description = "EventKey identifiers (dotted lowercase names like minutes.minute.generated_v1) in the event catalog fixtures are public catalog data, not credentials; the entropy heuristic misreads them"
|
|
condition = "AND"
|
|
paths = ['''cmd/event/testdata/golden/.*''']
|
|
regexTarget = "secret"
|
|
regexes = ['''^[a-z0-9_]+(\.[a-z0-9_]+){2,}$''']
|
|
|
|
[[rules]]
|
|
id = "lark-bot-app-id"
|
|
description = "Detect Lark bot app ids"
|
|
regex = '''\bcli_[a-z0-9]{16}\b'''
|
|
keywords = ["cli_"]
|
|
|
|
[[rules]]
|
|
id = "lark-session-token"
|
|
description = "Detect Lark session tokens"
|
|
regex = '''\bXN0YXJ0-[A-Za-z0-9_-]+-WVuZA\b'''
|
|
keywords = ["XN0YXJ0-", "-WVuZA"]
|
|
|