Ben-grmbl 4e303d0284 fix(easypost): only detect tokens of correct length (#1628) 1 年之前
..
1password.go 93acc6e82a feat(rules): add 1password token (#1583) 1 年之前
adafruit.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
adobe.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
age.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
airtable.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
algolia.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
alibaba.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
asana.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
atlassian.go 4181ad647a Add new jira api token pattern (#1601) 1 年之前
authress.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
aws.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
azure.go 8fb39ba8dc feat(azure): detect Azure AD client secrets (#1199) 1 年之前
beamer.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
bitbucket.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
bittrex.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
clojars.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
cloudflare.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
codecov.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
cohere.go 1a2f656278 feat: add cohere rule (#1549) 1 年之前
coinbase.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
config.tmpl 2db25f1367 feat(config): ignore swagger-ui assets (#1604) 1 年之前
confluent.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
contentful.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
curl.go 202106a190 Add human readable description for curl rules (#1625) 1 年之前
databricks.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
datadog.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
definednetworking.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
digitalocean.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
discord.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
doppler.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
droneci.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
dropbox.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
duffel.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
dynatrace.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
easypost.go 4e303d0284 fix(easypost): only detect tokens of correct length (#1628) 1 年之前
etsy.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
facebook.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
fastly.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
finicity.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
finnhub.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
flickr.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
flutterwave.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
flyio.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
frameio.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
freshbooks.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
gcp.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
generic.go 48ea14bd47 feat: update global & generic allowlist (#1618) 1 年之前
github.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
gitlab.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
gitter.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
gocardless.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
grafana.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
harness.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
hashicorp.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
hashicorp_vault.go 81f0002845 fix(vault-service-token): ensure that TPS contains digits (#1614) 1 年之前
heroku.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
hubspot.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
huggingface.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
infracost.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
intercom.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
intra42.go 455ae0aab7 More rule fixes (#1586) 1 年之前
jfrog.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
jwt.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
kraken.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
kubernetes.go 455ae0aab7 More rule fixes (#1586) 1 年之前
kucoin.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
launchdarkly.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
linear.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
linkedin.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
lob.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
mailchimp.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
mailgun.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
mapbox.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
mattermost.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
messagebird.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
netlify.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
newrelic.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
npm.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
nuget.go aabe381539 Define multiple allowlists per rule (#1496) 1 年之前
nytimes.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
octopusdeploy.go 43fae355e6 feat(rules): create Octopus Deploy api key (#1602) 1 年之前
okta.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
openai.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
openshift.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
plaid.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
planetscale.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
postman.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
prefect.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
privateai.go 00bb82153e feat: add PrivateAI rule (#1548) 1 年之前
privatekey.go bf8a49fc29 Make private key check less greedy and include fifth dash (#1440) 1 年之前
pulumi.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
pypi.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
rapidapi.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
readme.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
rubygems.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
scalingo.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
sendbird.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
sendgrid.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
sendinblue.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
sentry.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
shippo.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
shopify.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
sidekiq.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
slack.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
snyk.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
square.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
squarespace.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
stopwords.go e97695b852 feat(generic-api-key): exclude keywords (#1587) 1 年之前
stripe.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
sumologic.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
teams.go 455ae0aab7 More rule fixes (#1586) 1 年之前
telegram.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
travisci.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
trello.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
twilio.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
twitch.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
twitter.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
typeform.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
yandex.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前
zendesk.go c11adc91ad Generate comprehensive secret samples (#1484) 1 年之前

readme.go

package rules

import (
"github.com/zricethezav/gitleaks/v8/cmd/generate/config/utils"
"github.com/zricethezav/gitleaks/v8/cmd/generate/secrets"
"github.com/zricethezav/gitleaks/v8/config"
)

func ReadMe() *config.Rule {
// define rule
r := config.Rule{
RuleID: "readme-api-token",
Description: "Detected a Readme API token, risking unauthorized documentation management and content exposure.",
Regex: utils.GenerateUniqueTokenRegex(`rdme_[a-z0-9]{70}`, false),
Entropy: 2,
Keywords: []string{
"rdme_",
},
}

// validate
tps := utils.GenerateSampleSecrets("api-token", "rdme_"+secrets.NewSecret(utils.AlphaNumeric("70")))

fps := []string{
`const API_KEY = 'rdme_XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX';`,
}
return utils.Validate(r, tps, fps)
}