cdanesi/docker-compose
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ci: tighten gitleaks compose rules
Gitleaks / gitleaks (push) Failing after 5s
Details

Browse Source
This commit is contained in:
Charles Danesi
2026-06-03 18:16:54 -04:00
parent 5c72b0b3fc
commit f057648ce2
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitleaks.toml
+2 -2
View File
@@ -12,14 +12,14 @@ regexes = [
[[rules]]
id = "docker-env-password"
description = "Hardcoded password in docker-compose environment"
regex = '''(?i)(PASSWORD|PASS|PWD)\s*[:=]\s*['"]?([^$'{"][^\s'"]{5,})['"]?'''
regex = '''(?i)(PASSWORD|PASS|PWD)\s*[:=]\s*['"]?([A-Za-z0-9!@#%^&+=.,_~/-]{8,})['"]?'''
secretGroup = 2
tags = ["docker", "compose", "password", "env"]
[[rules]]
id = "docker-env-secret"
description = "Hardcoded secret, token, or API key in docker-compose environment"
regex = '''(?i)(SECRET|TOKEN|API[_-]?KEY)\s*[:=]\s*['"]?([^$'{"][A-Za-z0-9_\-]{15,})['"]?'''
regex = '''(?i)(SECRET|TOKEN|API[_-]?KEY)\s*[:=]\s*['"]?([A-Za-z0-9_\-]{20,})['"]?'''
secretGroup = 2
tags = ["docker", "compose", "secret", "env"]