Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore(deps): update pre-commit hook zricethezav/gitleaks to v8.18.4 #200

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

chore(deps): update pre-commit hook zricethezav/gitleaks to v8.18.4 #200

wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Feb 25, 2023 •
edited
Loading

This PR contains the following updates:

Package Type Update Change
zricethezav/gitleaks repository minor v8.15.3 -> v8.18.4

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

Release Notes

zricethezav/gitleaks (zricethezav/gitleaks)

v8.18.4

Compare Source

Changelog

Shout out to @​coderabbit for their sponsorship!

v8.18.3

Compare Source

Changelog

v8.18.2

Compare Source

Changelog

v8.18.1

Compare Source

Changelog

v8.18.0

Compare Source

What's Changed

New Contributors

Full Changelog: gitleaks/gitleaks@v8.17.0...v8.18.0

v8.17.0

Compare Source

What's Changed

New Contributors

Full Changelog: gitleaks/gitleaks@v8.16.4...v8.17.0

v8.16.4

Compare Source

Changelog

v8.16.3

Compare Source

Changelog

Huuuuuge thank you to all the contributors especially @​rgmz

@​edwardwang888 @​wparad @​sadikkuzu @​RafaelFigueiredo @​fgreinacher @​jasikpark @​sergiomarotco

v8.16.2

Compare Source

Changelog

Thanks to @​americanair for sponsoring this open source project!

Thanks to all the contributors this release: @​fgreinacher @​wparad @​RafaelFigueiredo @​sergiomarotco @​jasikpark

v8.16.1

Compare Source

Changelog

v8.16.0

Compare Source

Changelog

Allowlist Regex Targets

Let's use the generic rule to demonstrate the new regexTarget allowlist option

[[rules]]
description = "Generic API Key"
id = "generic-api-key"
regex = '''(?i)(?:key|api|token|secret|client|passwd|password|auth|access)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([0-9a-z\-_.=]{10,150})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
secretGroup = 1
entropy = 3.5
keywords = [
    "key","api","token","secret","client","passwd","password","auth","access",
]

example.txt will be our target and contain a single line with a fake secret:

var discord_client_secret = '8dyfuiRyq=vVc3RRr_edRk-fK__JItpZ'

Running gitleaks on this file using the generic rule will return one finding:

gitleaks detect --source=example.txt --no-git -v --config=example.toml

    ○
    │╲
    │ ○
    ○ ░
    ░    gitleaks

Finding:     discord_client_secret = '8dyfuiRyq=vVc3RRr_edRk-fK__JItpZ'
Secret:      8dyfuiRyq=vVc3RRr_edRk-fK__JItpZ
RuleID:      generic-api-key
Entropy:     4.413910
File:        example.txt
Line:        1
Fingerprint: example.txt:generic-api-key:1

We can add a allowlist regexes entry to include part of the secret. This will cause gitleaks to ignore the finding above.
Note that by default gitleaks uses the Secret to compare against allowlist regexes.

Adding the following allowlist to the generic rule will cause gitleaks to ignore the finding:

[rules.allowlist]
regexes = ["vV"]

But now say you don't want to use Secret to compare against your allowlist regexes. Well, now you can use regexTarget and set the value as either line or match to compare against the line or regex match:

[rules.allowlist]
regexTarget = "match"
regexes = ["discord"]

and

[rules.allowlist]
regexTarget = "line"
regexes = ["var"]

will both result in the finding being ignored because discord is found in the generic rule regex match and var is in the line where the finding was found.

In addition to rule allowlists, you can set regexTarget in the global allowlist:

[allowlist]
regexTarget = "line"
regexes = ["var"]

Thanks @​bplaxco for the review

v8.15.4

Compare Source

Changelog

Shouts outs to @​sandyydk @​raffis @​lawndoc @​sadikkuzu

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot changed the title chore(deps): update pre-commit hook zricethezav/gitleaks to v8.15.4 chore(deps): update pre-commit hook zricethezav/gitleaks to v8.16.0 Feb 26, 2023
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from 8d94c6e to bef1775 Compare February 26, 2023 16:03
@renovate renovate bot changed the title chore(deps): update pre-commit hook zricethezav/gitleaks to v8.16.0 chore(deps): update pre-commit hook zricethezav/gitleaks to v8.16.1 Mar 14, 2023
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from bef1775 to 22ea0ee Compare March 14, 2023 20:06
@renovate renovate bot changed the title chore(deps): update pre-commit hook zricethezav/gitleaks to v8.16.1 chore(deps): update pre-commit hook zricethezav/gitleaks to v8.16.2 Mar 30, 2023
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from 22ea0ee to 70d1f0b Compare March 30, 2023 14:44
@renovate renovate bot changed the title chore(deps): update pre-commit hook zricethezav/gitleaks to v8.16.2 chore(deps): update pre-commit hook zricethezav/gitleaks to v8.16.3 May 28, 2023
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from 70d1f0b to 457d895 Compare May 28, 2023 11:13
@renovate renovate bot changed the title chore(deps): update pre-commit hook zricethezav/gitleaks to v8.16.3 chore(deps): update pre-commit hook zricethezav/gitleaks to v8.16.4 Jun 6, 2023
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from 457d895 to 586c259 Compare June 6, 2023 20:26
@renovate renovate bot changed the title chore(deps): update pre-commit hook zricethezav/gitleaks to v8.16.4 chore(deps): update pre-commit hook zricethezav/gitleaks to v8.17.0 Jun 15, 2023
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from 586c259 to f089aed Compare June 15, 2023 14:27
@renovate renovate bot changed the title chore(deps): update pre-commit hook zricethezav/gitleaks to v8.17.0 chore(deps): update pre-commit hook zricethezav/gitleaks to v8.18.0 Aug 22, 2023
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from f089aed to 3f81900 Compare August 22, 2023 19:46
@renovate renovate bot changed the title chore(deps): update pre-commit hook zricethezav/gitleaks to v8.18.0 chore(deps): update pre-commit hook zricethezav/gitleaks to v8.18.1 Nov 17, 2023
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from 3f81900 to 7dc68fc Compare November 17, 2023 22:28
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from 7dc68fc to f248bc5 Compare February 1, 2024 19:53
@renovate renovate bot changed the title chore(deps): update pre-commit hook zricethezav/gitleaks to v8.18.1 chore(deps): update pre-commit hook zricethezav/gitleaks to v8.18.2 Feb 1, 2024
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from f248bc5 to 8768b12 Compare June 1, 2024 16:18
@renovate renovate bot changed the title chore(deps): update pre-commit hook zricethezav/gitleaks to v8.18.2 chore(deps): update pre-commit hook zricethezav/gitleaks to v8.18.3 Jun 1, 2024
@renovate renovate bot force-pushed the renovate/zricethezav-gitleaks-8.x branch from 8768b12 to 5be1309 Compare June 14, 2024 16:02
@renovate renovate bot changed the title chore(deps): update pre-commit hook zricethezav/gitleaks to v8.18.3 chore(deps): update pre-commit hook zricethezav/gitleaks to v8.18.4 Jun 14, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants