Explorar o código

Removing private keyword from private key rule (#858)

Zachary Rice %!s(int64=3) %!d(string=hai) anos
pai
achega
ad7509e3b4
Modificáronse 2 ficheiros con 8 adicións e 3 borrados
  1. 7 2
      cmd/generate/config/rules/privatekey.go
  2. 1 1
      config/gitleaks.toml

+ 7 - 2
cmd/generate/config/rules/privatekey.go

@@ -12,12 +12,17 @@ func PrivateKey() *config.Rule {
 		Description: "Private Key",
 		RuleID:      "private-key",
 		Regex:       regexp.MustCompile(`(?i)-----BEGIN[ A-Z0-9_-]{0,100}PRIVATE KEY-----[\s\S-]*KEY----`),
-		Keywords:    []string{"-----BEGIN PRIVATE"},
+		Keywords:    []string{"-----BEGIN"},
 	}
 
 	// validate
 	tps := []string{`-----BEGIN PRIVATE KEY-----
 anything
------END PRIVATE KEY-----`} // gitleaks:allow
+-----END PRIVATE KEY-----`,
+		`-----BEGIN RSA PRIVATE KEY-----
+abcdefghijklmnopqrstuvwxyz
+-----END RSA PRIVATE KEY-----
+`,
+	} // gitleaks:allow
 	return validate(r, tps, nil)
 }

+ 1 - 1
config/gitleaks.toml

@@ -574,7 +574,7 @@ description = "Private Key"
 id = "private-key"
 regex = '''(?i)-----BEGIN[ A-Z0-9_-]{0,100}PRIVATE KEY-----[\s\S-]*KEY----'''
 keywords = [
-    "-----begin private",
+    "-----begin",
 ]
 
 [[rules]]