generated from onedr0p/cluster-template
-
Notifications
You must be signed in to change notification settings - Fork 0
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
chore(deps): update pre-commit hook zricethezav/gitleaks to v8.18.4 #200
Open
renovate
wants to merge
1
commit into
main
Choose a base branch
from
renovate/zricethezav-gitleaks-8.x
base: main
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
8d94c6e
to
bef1775
Compare
bef1775
to
22ea0ee
Compare
22ea0ee
to
70d1f0b
Compare
70d1f0b
to
457d895
Compare
457d895
to
586c259
Compare
586c259
to
f089aed
Compare
f089aed
to
3f81900
Compare
3f81900
to
7dc68fc
Compare
7dc68fc
to
f248bc5
Compare
f248bc5
to
8768b12
Compare
8768b12
to
5be1309
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Labels
None yet
0 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v8.15.3
->v8.18.4
Note: The
pre-commit
manager in Renovate is not supported by thepre-commit
maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.Release Notes
zricethezav/gitleaks (zricethezav/gitleaks)
v8.18.4
Compare Source
Changelog
02808f4
Limit hashicorp-tf-password to .tf/.hcl files (#1420)07e1c30
rm printdb63fc1
reduce telegram... todo url and xml for later9a4538c
coderabbit.ai <3fe94ef9
Add NewRelic insert key detection (#1417)bb4424d
Improved Telegram bot token rule regex and added more test cases (#1404)575e923
Add intra42 client secret (#1408)Shout out to @coderabbit for their sponsorship!
v8.18.3
Compare Source
Changelog
39947b0
extend FB access token discovery (#1407)79cac73
tests: scalingo validation consistent test (#1359)247f423
add real (test) standard and restricted keys (#1375)821b232
Add Cloudflare API and Origin CA keys (#1374)57ac4b3
Update "contributing guidelines" link (#1390)db69e82
add update token from square (#1370)4b54328
feat: facebook secret, access token, and page access token rules (#1372)979f213
update mailchimp with new tokens (#1376)59c0cc7
Append ordered rules when extending (#1304)6c52f87
fix: age rule id with dashes (#1349)247a5e7
patching golang.org/x/text for CVE-2021-38561 and CVE-2022-32149 (#1342)8d23afd
Use latest base images. (#1334)v8.18.2
Compare Source
Changelog
ac4b514
removed gitleaks user from Dockerfile (#1313)76c9e31
Remove IAM identifiers for non-credential resources in the aws-access-token rule (#1307)afe046b
Update stripe rule to not alert on publishable keys (#1320)8b8920d
--max-target-megabytes flag now supported for --no-git flag as well (#1330)a59289c
add pre-commit hook gitleaks-system (#1225)870194b
fix errors when using protect and an external git diff tool (#1318)179c607
rename filesystem to directory (#1317)8de8938
Enhance Secret Descriptions (#1300)ca7aa14
Small refactordetect
andsources
(#1297)01e60c8
chore(config): refactor to go generate; simplify configRules init (#1295)54f5f04
forgot symlinks221d5c4
pretty apparent 'protect' and 'detect' should be merged into one command (#1294)128b50f
style: sort the stopwords (#1289)v8.18.1
Compare Source
Changelog
dab7d02
dont crash on 100gb files pls (#1292)e63b657
remove secretgroup from default config (#1288)20fcf50
feat: Hashicorp Terraform fields for password (#1237)b496677
perf: avoid allocations with(*regexp.Regexp).MatchString
(#1283)a3ab4e8
refactor: more explicit rules (#1280)bd9a25a
bugfix: reduce false positives for stripe tokens by using word boundaries in regex (#1278)6d0d8b5
add Infracost API rule (#1273)2959fc0
refactor: simplify test asserts (#1271)d37b38f
Update Makefile14b1ca9
refactor: change detect tests to t.Fatal instead of log.Fatal (#1270)d9f86d6
feat(rules): Add detection for Scalingo API Token (#1262)ed34259
feat(jwt): detect base64-encoded tokens (#1256)0d5e46f
feat: add --ignore-gitleaks-allow cmd flag (#1260)a82ac29
switch out libs (#1259)0b84afa
fix: no-color option should also affect zerolog output (#1242)8976539
Fixed lineEnd indexing if the match is the whole line (#1223)30c6117
feat: Add optional redaction value, default 100 (#1229)e9135cf
fix(jwt): longer segment lengths (#1214)f65f915
Added yarn.lock file to default allowlist paths (#1258)abfd0f3
Update README.md18283bb
feat(rules): make case insensitivity optional (#1215)9fb36b2
feat(rules): detect Hugging Face access tokens (#1204)db4bc0f
Resolve #1170 - Enable selection of a single rule (#1183)3cbcda2
Update authress.go to include alternate form account dash (-) (#1224)46c6272
refactor: remove unnecessary removing temp files in tests (#1255)963a697
refactor: use os.ReadFile instead of os.Open + io.ReadAll (#1254)163ec21
fix(sumologic): improve patterns (#1218)v8.18.0
Compare Source
What's Changed
New Contributors
Full Changelog: gitleaks/gitleaks@v8.17.0...v8.18.0
v8.17.0
Compare Source
What's Changed
REDACTED
to stopwords forgeneric-api-key
rule by @9999years in https://github.com/gitleaks/gitleaks/pull/1188.gitleaksignore
fingerprint lacks SHA by @rgmz in https://github.com/gitleaks/gitleaks/pull/1156--log-opts
values by @rgmz in https://github.com/gitleaks/gitleaks/pull/1160New Contributors
Full Changelog: gitleaks/gitleaks@v8.16.4...v8.17.0
v8.16.4
Compare Source
Changelog
6f75511
Added option to specify .gitleaksignore path (#1179) @pacorreia190ac97
Fix closing file in writeJson and writeSarif (#1187) @alexandear6dbb0c5
Simplify tests by using T.TempDir (#1186) @alexandear6705461
Fix typos in *.md, comments and logs (#1185) @alexandear9869eab
Update README.md16f1ec0
Update bug_report.md8d80a5a
Adding discord channel to readme146f69e
🐛 fix(sarif): update report to pass validator (#1167) @DariuszPorowskiv8.16.3
Compare Source
Changelog
51ca0f8
fix(detect): extra secret from group before checking allowlist (#1152)81cf308
Fix G307 warning: Deferring unsafe method "Close" on type "*os.File" (#1154)bd8b145
fix(detect): avoid panic with verbose flag (#1143)839f114
Fix typo (#1142)63c3076
No color (#1136)56079dc
safer out of bounds (#1135)9c6650d
Add Authress access key format: https://authress.io/knowledge-base/docs/authorization/service-clients/secrets-scanning/ (#1131)6fa63f4
Update pre-commit address and rev tag in README (#1125)9701bf1
Bufix/1100 protect stagged files (#1121)db79d81
fix README.md !? (#1123)8a31f4a
Improve rule descriptions for Stripe and Facebook access tokens (#1119)6b0c303
Add Defined Networking API Tokens (#1096)Huuuuuge thank you to all the contributors especially @rgmz
@edwardwang888 @wparad @sadikkuzu @RafaelFigueiredo @fgreinacher @jasikpark @sergiomarotco
v8.16.2
Compare Source
Changelog
63c3076
No color (#1136)56079dc
safer out of bounds (#1135) (Thank you @agmond)9c6650d
Add Authress access key format: https://authress.io/knowledge-base/docs/authorization/service-clients/secrets-scanning/ (#1131)6fa63f4
Update pre-commit address and rev tag in README (#1125)9701bf1
Bufix/1100 protect stagged files (#1121)a5b9c24
remove extra default on source optiondb79d81
fix README.md !? (#1123)8a31f4a
Improve rule descriptions for Stripe and Facebook access tokens (#1119)6b0c303
Add Defined Networking API Tokens (#1096)Thanks to @americanair for sponsoring this open source project!
Thanks to all the contributors this release: @fgreinacher @wparad @RafaelFigueiredo @sergiomarotco @jasikpark
v8.16.1
Compare Source
Changelog
1fb3a77
Update gitleaks.toml (#1116)11c2ad0
Add gradle.lockfile to allowlist (#1112)e55d397
Update pre-commit rev tag in README (#1108)2dd9946
Add pnpm-lock.yaml and Database.refactorlo (#1109)v8.16.0
Compare Source
Changelog
4b5e8e1
Feat/allowlist regex target (#1107)Allowlist Regex Targets
Let's use the generic rule to demonstrate the new
regexTarget
allowlist optionexample.txt
will be our target and contain a single line with a fake secret:Running gitleaks on this file using the generic rule will return one finding:
We can add a allowlist
regexes
entry to include part of the secret. This will cause gitleaks to ignore the finding above.Note that by default gitleaks uses the Secret to compare against allowlist regexes.
Adding the following allowlist to the generic rule will cause gitleaks to ignore the finding:
But now say you don't want to use
Secret
to compare against your allowlist regexes. Well, now you can useregexTarget
and set the value as eitherline
ormatch
to compare against the line or regex match:and
will both result in the finding being ignored because
discord
is found in the generic rule regex match andvar
is in the line where the finding was found.In addition to rule allowlists, you can set
regexTarget
in the global allowlist:Thanks @bplaxco for the review
v8.15.4
Compare Source
Changelog
343e693
ignore package-lock.json (#1076)0060ab6
Fix typos in README.md and CONTRIBUTING.md (#1090)0259088
fix: ignore baseline if path was not relative in source (#1101)088f8b8
Fix H in GitHub and update pre-commit rev tag in README (#1087)Shouts outs to @sandyydk @raffis @lawndoc @sadikkuzu
Configuration
📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.