Skip to content

chore(deps): update dependency zricethezav/gitleaks to v8.18.0

Ghost Userrequested to merge
renovate/zricethezav-gitleaks-8.x into main

This MR contains the following updates:

Package Update Change
zricethezav/gitleaks minor v8.9.0 -> v8.18.0

Release Notes

zricethezav/gitleaks (zricethezav/gitleaks)

v8.18.0

Compare Source

What's Changed

New Contributors

Full Changelog: https://github.com/gitleaks/gitleaks/compare/v8.17.0...v8.18.0

v8.17.0

Compare Source

What's Changed

New Contributors

Full Changelog: https://github.com/gitleaks/gitleaks/compare/v8.16.4...v8.17.0

v8.16.4

Compare Source

Changelog

v8.16.3

Compare Source

Changelog

Huuuuuge thank you to all the contributors especially @​rgmz

@​edwardwang888 @​wparad @​sadikkuzu @​RafaelFigueiredo @​fgreinacher @​jasikpark @​sergiomarotco

v8.16.2

Compare Source

Changelog

Thanks to @​americanair for sponsoring this open source project!

Thanks to all the contributors this release: @​fgreinacher @​wparad @​RafaelFigueiredo @​sergiomarotco @​jasikpark

v8.16.1

Compare Source

Changelog

v8.16.0

Compare Source

Changelog

Allowlist Regex Targets

Let's use the generic rule to demonstrate the new regexTarget allowlist option

[[rules]]
description = "Generic API Key"
id = "generic-api-key"
regex = '''(?i)(?:key|api|token|secret|client|passwd|password|auth|access)(?:[0-9a-z\-_\t .]{0,20})(?:[\s|']|[\s|"]){0,3}(?:=|>|:=|\|\|:|<=|=>|:)(?:'|\"|\s|=|\x60){0,5}([0-9a-z\-_.=]{10,150})(?:['|\"|\n|\r|\s|\x60|;]|$)'''
secretGroup = 1
entropy = 3.5
keywords = [
    "key","api","token","secret","client","passwd","password","auth","access",
]

example.txt will be our target and contain a single line with a fake secret:

var discord_client_secret = '8dyfuiRyq=vVc3RRr_edRk-fK__JItpZ'

Running gitleaks on this file using the generic rule will return one finding:

gitleaks detect --source=example.txt --no-git -v --config=example.toml

    ○
    │╲
    │ ○
    ○ ░
    ░    gitleaks

Finding:     discord_client_secret = '8dyfuiRyq=vVc3RRr_edRk-fK__JItpZ'
Secret:      8dyfuiRyq=vVc3RRr_edRk-fK__JItpZ
RuleID:      generic-api-key
Entropy:     4.413910
File:        example.txt
Line:        1
Fingerprint: example.txt:generic-api-key:1

We can add a allowlist regexes entry to include part of the secret. This will cause gitleaks to ignore the finding above. Note that by default gitleaks uses the Secret to compare against allowlist regexes.

Adding the following allowlist to the generic rule will cause gitleaks to ignore the finding:

[rules.allowlist]
regexes = ["vV"]

But now say you don't want to use Secret to compare against your allowlist regexes. Well, now you can use regexTarget and set the value as either line or match to compare against the line or regex match:

[rules.allowlist]
regexTarget = "match"
regexes = ["discord"]

and

[rules.allowlist]
regexTarget = "line"
regexes = ["var"]

will both result in the finding being ignored because discord is found in the generic rule regex match and var is in the line where the finding was found.

In addition to rule allowlists, you can set regexTarget in the global allowlist:

[allowlist]
regexTarget = "line"
regexes = ["var"]

Thanks @​bplaxco for the review

v8.15.4

Compare Source

Changelog

Shouts outs to @​sandyydk @​raffis @​lawndoc @​sadikkuzu

v8.15.3

Compare Source

Changelog

v8.15.2

Compare Source

Changelog

v8.15.1

Compare Source

Changelog

v8.15.0

Compare Source

Changelog

Thanks @​RickyGrassmuck @​sergiomarotco

--pipe

Try --pipe with anything...

git log -p | gitleaks detect --pipe
--follow-symlinks
gitleaks --source . --no-git --follow-symlinks

v8.14.1

Compare Source

Changelog

  • c39e764 define log-opts, odd that this wasn't failing before... (#​1009)

v8.14.0

Compare Source

Changelog

Thanks to @​roma8389 @​michenriksen @​JoostVoskuil @​alexgit2k @​Becojo @​nnnkkk7 @​mojotx @​weineran 💪🏻

v8.13.0

Compare Source

Changelog

Thanks to @​maltemorgenstern @​b4bay @​durkinza @​akashchandwani @​very-doge-wow @​gawansch 👍🏻

v8.12.0

Compare Source

Changelog

Screen Shot 2022-09-04 at 9 13 54 AM

If this change causes outrage I can always add a --legacy-output option.

v8.11.2

Compare Source

Changelog

v8.11.1

Compare Source

Changelog

v8.11.0

Compare Source

Changelog

  • b6b7cfb bump gitdiff, add git.Err state, better log messages (#​954)

v8.10.3

Compare Source

Changelog

v8.10.2

Compare Source

Changelog

v8.10.1

Compare Source

Changelog

  • b8f236c Changed fingerprint to explicit concatenation of commit, file, rule-id, and start line (#​944)

v8.10.0

Compare Source

Changelog

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

  • If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot.

Edited by Ghost User

Merge request reports