Skip to content

Add .gitleaksignore file to ignore sample tokens in documentation

Pedro Pombeiro requested to merge pedropombeiro/gitleaksignore into master

What does this MR do and why?

Describe in detail what your merge request does and why.

This MR introduces a .gitleaksignore file to ignore 2 known false-positive secrets from a documentation page.

Before:

$ gitleaks protect --no-banner --staged --redact --verbose
Finding:     --registration-token= "REDACTED"
Secret:      REDACTED
RuleID:      generic-api-key
Entropy:     4.563856
File:        doc/architecture/blueprints/runner_tokens/index.md
Line:        506
Fingerprint: doc/architecture/blueprints/runner_tokens/index.md:generic-api-key:506

6:04PM INF 1 commits scanned.
6:04PM INF scan completed in 59.1ms
6:04PM WRN leaks found: 1

After:

$ gitleaks protect --no-banner --staged --redact --verbose
6:08PM INF 0 commits scanned.
6:08PM INF scan completed in 58.3ms
6:08PM INF no leaks found

Screenshots or screen recordings

Screenshots are required for UI changes, and strongly recommended for all other merge requests.

How to set up and validate locally

Numbered steps to set up and validate the change are strongly suggested.

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Edited by Pedro Pombeiro

Merge request reports