title = "gitleaks config" [[rules]] description = "Generic API Key" id = "generic-api-key" regex = '''(?i)((key|api|token|secret|password)[a-z0-9_ .\-,]{0,25})(=|>|:=|\|\|:|<=|=>|:).{0,5}['\"]([0-9a-zA-Z\-_=]{8,64})['\"]''' path = '''.py''' entropy = 3.7 secretGroup = 4 [allowlist] description = "global allow lists" regexes = [ '''219-09-9999''', '''078-05-1120''', '''(9[0-9]{2}|666)-\d{2}-\d{4}''', '''process''', '''getenv''', '''\.env''', '''env\(''', '''env\.''', '''setting''', '''load''', '''token''', '''password''', '''secret''', '''api\_key''', '''apikey''', '''api\-key''', ] paths = [ '''gitleaks.toml''', '''(.*?)(jpg|gif|doc|pdf|bin|svg|socket)$''', '''(go.mod|go.sum)$''' ]