ignore package-lock.json (#1076)

* ignore package-lock.json

`package-lock.json` is automatically generated by npm

* add package-lock.json to global allowlist

cmd/generate/config/rules/config.tmpl

@@ -17,6 +17,7 @@ paths = [
     '''(.*?)(jpg|gif|doc|docx|zip|xls|pdf|bin|svg|socket)$''',
     '''(go.mod|go.sum)$''',
     '''node_modules''',
+    '''package-lock.json''',
     '''vendor''',
 ]
 
@@ -57,4 +58,4 @@ keywords = [
     {{ range $j, $keyword := $rule.Keywords }}"{{$keyword}}",{{end}}
 ]
 
-{{end}}{{end}}
+{{end}}{{end}}

config/gitleaks.toml

@@ -17,6 +17,7 @@ paths = [
     '''(.*?)(jpg|gif|doc|docx|zip|xls|pdf|bin|svg|socket)$''',
     '''(go.mod|go.sum)$''',
     '''node_modules''',
+    '''package-lock.json''',
     '''vendor''',
 ]