HydroModPy/.gitleaks.toml at dev · HydroModPy/HydroModPy · GitHub

32 lines (28 loc) · 1.04 KB

title = "HydroModPy Gitleaks config"

[extend]

useDefault = true

[[rules]]

id = "generic-api-key"

[[rules.allowlists]]

description = "Generated gallery metadata keys are not credentials."

condition = "AND"

regexTarget = "line"

paths = [

'''(^|/)docs/source/_static/capability_gallery/.*_summary\.json$''',

'''(^|/)examples/projects/07_mesh_gallery/.*/case\.json$''',

'''(^|/)examples/projects/09_capability_gallery/.*/case\.json$''',

'''(^|/)examples/projects/09_capability_gallery/.*/README\.md$''',

'''(^|/)tools/doc_gallery/sync_mesh_catchment_runs\.py$''',

]

regexes = [

'''^\s*"key":\s*"[A-Za-z0-9_.:-]+",?\s*$''',

'''^\s*"case_family_key":\s*"[A-Za-z0-9_.:-]+",?\s*$''',

'''^\s*"comparison_family_key":\s*"[A-Za-z0-9_.:-]+",?\s*$''',

'''^\s*key="[A-Za-z0-9_.:-]+",?\s*$''',

'''^\s*\|\s*`comparison_family_key`\s*\|.*$''',

]

[[rules.allowlists]]

description = "Testbed reporting scripts use key= and x/y_key= for figure axes, not credentials."

paths = [

'''(^|/)examples/projects/10_testbed_workflow/.*\.py$''',

]

Expand file tree