Custom .gitleaks.toml

.gitleaks.toml

[[rules]]
id = "md5-hash"
description = "MD5 hash detected, ignoring images"
regex = '''\b[a-fA-F0-9]{32}\b'''
severity = "medium"
[[rules.allowlists]]
paths = [
    ".*\\.jpg$",
    ".*\\.png$"
]

[[rules]]
id = "sha1-hash"
description = "Detect SHA-1 hashes, ignoring anything inside .git directory"
regex = '''\b[a-fA-F0-9]{40}\b'''
severity = "medium"
[[rules.allowlists]]
# Allow any file path under .git directory
paths = [
    '''.*\.git/.*'''
]

[[rules]]
id = "apache-apr1-hash"
description = "Detect Apache APR1 (MD5-based) password hashes"
regex = '''\$apr1\$[A-Za-z0-9./]{1,8}\$[A-Za-z0-9./]{22}'''
secretGroup = 0
severity = "high"

[[rules]]
id = "rsa-private-key"
description = "RSA private key"
regex = '''-----BEGIN RSA PRIVATE KEY-----'''
severity = "critical"

[[rules]]
id = "ssh-private-key"
description = "OpenSSH private key"
regex = '''-----BEGIN OPENSSH PRIVATE KEY-----'''
severity = "critical"