Richard Gomez 961f2e674f feat(generic-api-key): tune false positives (#1606) 1 year ago
..
1password.go 93acc6e82a feat(rules): add 1password token (#1583) 1 year ago
adafruit.go bd81872eee Make config generation utils public (#1480) 1 year ago
adobe.go 455ae0aab7 More rule fixes (#1586) 1 year ago
age.go bd81872eee Make config generation utils public (#1480) 1 year ago
airtable.go bd81872eee Make config generation utils public (#1480) 1 year ago
algolia.go bd81872eee Make config generation utils public (#1480) 1 year ago
alibaba.go 455ae0aab7 More rule fixes (#1586) 1 year ago
asana.go bd81872eee Make config generation utils public (#1480) 1 year ago
atlassian.go bd81872eee Make config generation utils public (#1480) 1 year ago
authress.go 455ae0aab7 More rule fixes (#1586) 1 year ago
aws.go 9152eaa57a feat(aws): add entropy & allowlist (#1582) 1 year ago
azure.go 8fb39ba8dc feat(azure): detect Azure AD client secrets (#1199) 1 year ago
beamer.go bd81872eee Make config generation utils public (#1480) 1 year ago
bitbucket.go bd81872eee Make config generation utils public (#1480) 1 year ago
bittrex.go bd81872eee Make config generation utils public (#1480) 1 year ago
clojars.go 455ae0aab7 More rule fixes (#1586) 1 year ago
cloudflare.go 455ae0aab7 More rule fixes (#1586) 1 year ago
codecov.go bd81872eee Make config generation utils public (#1480) 1 year ago
cohere.go 1a2f656278 feat: add cohere rule (#1549) 1 year ago
coinbase.go bd81872eee Make config generation utils public (#1480) 1 year ago
config.tmpl 2db25f1367 feat(config): ignore swagger-ui assets (#1604) 1 year ago
confluent.go bd81872eee Make config generation utils public (#1480) 1 year ago
contentful.go bd81872eee Make config generation utils public (#1480) 1 year ago
curl.go 7206d6bc56 feat(curl): tweak tps and fps (#1603) 1 year ago
databricks.go 455ae0aab7 More rule fixes (#1586) 1 year ago
datadog.go bd81872eee Make config generation utils public (#1480) 1 year ago
definednetworking.go bd81872eee Make config generation utils public (#1480) 1 year ago
digitalocean.go 455ae0aab7 More rule fixes (#1586) 1 year ago
discord.go 8cfa6b2e43 fix(rules): add entropy (#1580) 1 year ago
doppler.go 455ae0aab7 More rule fixes (#1586) 1 year ago
droneci.go bd81872eee Make config generation utils public (#1480) 1 year ago
dropbox.go bd81872eee Make config generation utils public (#1480) 1 year ago
duffel.go 455ae0aab7 More rule fixes (#1586) 1 year ago
dynatrace.go 455ae0aab7 More rule fixes (#1586) 1 year ago
easypost.go 455ae0aab7 More rule fixes (#1586) 1 year ago
etsy.go 9e06824372 Restrict Etsy keywords (#1491) 1 year ago
facebook.go 455ae0aab7 More rule fixes (#1586) 1 year ago
fastly.go bd81872eee Make config generation utils public (#1480) 1 year ago
finicity.go bd81872eee Make config generation utils public (#1480) 1 year ago
finnhub.go bd81872eee Make config generation utils public (#1480) 1 year ago
flickr.go bd81872eee Make config generation utils public (#1480) 1 year ago
flutterwave.go 455ae0aab7 More rule fixes (#1586) 1 year ago
flyio.go 78f7d3f5df feat: create fly.io rule (#1528) 1 year ago
frameio.go bd81872eee Make config generation utils public (#1480) 1 year ago
freshbooks.go bd81872eee Make config generation utils public (#1480) 1 year ago
gcp.go df126a7473 feat(gcp): update api key rule (#1481) 1 year ago
generic.go 961f2e674f feat(generic-api-key): tune false positives (#1606) 1 year ago
github.go 455ae0aab7 More rule fixes (#1586) 1 year ago
gitlab.go 8cfa6b2e43 fix(rules): add entropy (#1580) 1 year ago
gitter.go bd81872eee Make config generation utils public (#1480) 1 year ago
gocardless.go bd81872eee Make config generation utils public (#1480) 1 year ago
grafana.go 455ae0aab7 More rule fixes (#1586) 1 year ago
harness.go e93a7c0d26 Update Harness rules to add _ and - in the account ID part. (#1503) 1 year ago
hashicorp.go 455ae0aab7 More rule fixes (#1586) 1 year ago
hashicorp_vault.go 455ae0aab7 More rule fixes (#1586) 1 year ago
heroku.go bd81872eee Make config generation utils public (#1480) 1 year ago
hubspot.go bd81872eee Make config generation utils public (#1480) 1 year ago
huggingface.go 455ae0aab7 More rule fixes (#1586) 1 year ago
infracost.go 8cfa6b2e43 fix(rules): add entropy (#1580) 1 year ago
intercom.go bd81872eee Make config generation utils public (#1480) 1 year ago
intra42.go 455ae0aab7 More rule fixes (#1586) 1 year ago
jfrog.go bd81872eee Make config generation utils public (#1480) 1 year ago
jwt.go 455ae0aab7 More rule fixes (#1586) 1 year ago
kraken.go bd81872eee Make config generation utils public (#1480) 1 year ago
kubernetes.go 455ae0aab7 More rule fixes (#1586) 1 year ago
kucoin.go bd81872eee Make config generation utils public (#1480) 1 year ago
launchdarkly.go bd81872eee Make config generation utils public (#1480) 1 year ago
linear.go 455ae0aab7 More rule fixes (#1586) 1 year ago
linkedin.go bd81872eee Make config generation utils public (#1480) 1 year ago
lob.go bd81872eee Make config generation utils public (#1480) 1 year ago
mailchimp.go bd81872eee Make config generation utils public (#1480) 1 year ago
mailgun.go bd81872eee Make config generation utils public (#1480) 1 year ago
mapbox.go bd81872eee Make config generation utils public (#1480) 1 year ago
mattermost.go bd81872eee Make config generation utils public (#1480) 1 year ago
messagebird.go bd81872eee Make config generation utils public (#1480) 1 year ago
netlify.go bd81872eee Make config generation utils public (#1480) 1 year ago
newrelic.go bd81872eee Make config generation utils public (#1480) 1 year ago
npm.go 455ae0aab7 More rule fixes (#1586) 1 year ago
nuget.go aabe381539 Define multiple allowlists per rule (#1496) 1 year ago
nytimes.go bd81872eee Make config generation utils public (#1480) 1 year ago
okta.go 0afb525e59 feat(okta): bump entropy to 4 (#1599) 1 year ago
openai.go 455ae0aab7 More rule fixes (#1586) 1 year ago
openshift.go 455ae0aab7 More rule fixes (#1586) 1 year ago
plaid.go bd81872eee Make config generation utils public (#1480) 1 year ago
planetscale.go 455ae0aab7 More rule fixes (#1586) 1 year ago
postman.go 455ae0aab7 More rule fixes (#1586) 1 year ago
prefect.go 455ae0aab7 More rule fixes (#1586) 1 year ago
privateai.go 00bb82153e feat: add PrivateAI rule (#1548) 1 year ago
privatekey.go bf8a49fc29 Make private key check less greedy and include fifth dash (#1440) 1 year ago
pulumi.go 455ae0aab7 More rule fixes (#1586) 1 year ago
pypi.go 455ae0aab7 More rule fixes (#1586) 1 year ago
rapidapi.go bd81872eee Make config generation utils public (#1480) 1 year ago
readme.go 455ae0aab7 More rule fixes (#1586) 1 year ago
rubygems.go 455ae0aab7 More rule fixes (#1586) 1 year ago
scalingo.go 455ae0aab7 More rule fixes (#1586) 1 year ago
sendbird.go bd81872eee Make config generation utils public (#1480) 1 year ago
sendgrid.go 455ae0aab7 More rule fixes (#1586) 1 year ago
sendinblue.go 455ae0aab7 More rule fixes (#1586) 1 year ago
sentry.go bd81872eee Make config generation utils public (#1480) 1 year ago
shippo.go 455ae0aab7 More rule fixes (#1586) 1 year ago
shopify.go 455ae0aab7 More rule fixes (#1586) 1 year ago
sidekiq.go bd81872eee Make config generation utils public (#1480) 1 year ago
slack.go 455ae0aab7 More rule fixes (#1586) 1 year ago
snyk.go bd81872eee Make config generation utils public (#1480) 1 year ago
square.go 455ae0aab7 More rule fixes (#1586) 1 year ago
squarespace.go bd81872eee Make config generation utils public (#1480) 1 year ago
stopwords.go e97695b852 feat(generic-api-key): exclude keywords (#1587) 1 year ago
stripe.go 455ae0aab7 More rule fixes (#1586) 1 year ago
sumologic.go 455ae0aab7 More rule fixes (#1586) 1 year ago
teams.go 455ae0aab7 More rule fixes (#1586) 1 year ago
telegram.go bd81872eee Make config generation utils public (#1480) 1 year ago
travisci.go bd81872eee Make config generation utils public (#1480) 1 year ago
trello.go bd81872eee Make config generation utils public (#1480) 1 year ago
twilio.go 455ae0aab7 More rule fixes (#1586) 1 year ago
twitch.go bd81872eee Make config generation utils public (#1480) 1 year ago
twitter.go bd81872eee Make config generation utils public (#1480) 1 year ago
typeform.go bd81872eee Make config generation utils public (#1480) 1 year ago
yandex.go bd81872eee Make config generation utils public (#1480) 1 year ago
zendesk.go bd81872eee Make config generation utils public (#1480) 1 year ago

readme.go

package rules

import (
"github.com/zricethezav/gitleaks/v8/cmd/generate/config/utils"
"github.com/zricethezav/gitleaks/v8/cmd/generate/secrets"
"github.com/zricethezav/gitleaks/v8/config"
)

func ReadMe() *config.Rule {
// define rule
r := config.Rule{
RuleID: "readme-api-token",
Description: "Detected a Readme API token, risking unauthorized documentation management and content exposure.",
Regex: utils.GenerateUniqueTokenRegex(`rdme_[a-z0-9]{70}`, false),
Entropy: 2,
Keywords: []string{
"rdme_",
},
}

// validate
tps := []string{
utils.GenerateSampleSecret("api-token", "rdme_"+secrets.NewSecret(utils.AlphaNumeric("70"))),
}
fps := []string{
`const API_KEY = 'rdme_XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX';`,
}
return utils.Validate(r, tps, fps)
}