Takuya Noguchi
--- a/Dockerfile
+++ b/Dockerfile
 ARG GITLEAKS_VERSION
 ARG TRUFFLEHOG_VERSION

-ENV GITLEAKS_VERSION ${GITLEAKS_VERSION:-v1.24.0}
+ENV GITLEAKS_VERSION ${GITLEAKS_VERSION:-v3.3.0}
--- a/scanner/gitleaks/gitleaks.toml
+++ b/scanner/gitleaks/gitleaks.toml
+
+[[rules]]
+	description = "Square OAuth secret"
+	regex = '''sq0csp-[0-9A-Za-z\\-_]{43}'''
+	tags = ["key", "square"]
+
+[[rules]]
+	description = "Twilio API key"
+	regex = '''(?i)twilio(.{0,20})?['\"][0-9a-f]{32}['\"]'''
+	tags = ["key", "twilio"]
+# end of adaption from Gitleaks's default config (as of v3.3.0) from the following:
+# https://github.com/zricethezav/gitleaks/blob/e7fbcf53338e283bd4c92ecb1e59de7a6df5fa14/config/default.go#L7-L137
+
+# Generic Credential including "-", "_", "/" should be detected
+[[rules]]
+	description = "Generic Credential"
--- a/scanner/gitleaks/gitleaks.toml
+++ b/scanner/gitleaks/gitleaks.toml
+[[rules]]
+	description = "Generic Credential"
+	regex = '''(?i)(api_key|apikey|secret)(.{0,20})?['|"][0-9a-zA-Z-_/]{16,45}['|"]'''
+	tags = ["key", "API", "generic"]
+
+# Stripe API key in test mode ("_test_") should be detected as well as ones in live mode
+# https://stripe.com/docs/keys#test-live-modes
+[[rules]]
+	description = "Stripe API key"
+	regex = '''(?i)stripe(.{0,20})?['\"][sk|rk]_(test|live)_[0-9a-zA-Z]{24}'''
+	tags = ["key", "Stripe"]
+
+# This config is adapted from Gitleaks's config example (as of v3.3.0) from the following:
+# https://github.com/zricethezav/gitleaks/blob/e7fbcf53338e283bd4c92ecb1e59de7a6df5fa14/examples/leaky-repo.toml#L149-L161
+[[rules]]
+	description = "Pure Entropy"
--- a/scanner/gitleaks/gitleaks.toml
+++ b/scanner/gitleaks/gitleaks.toml
+	description = "Entropy plus Generic Credential"
+	regex = '''(?i)(api_key|apikey|secret|key|api|password|pw)'''
+	entropies = [
+        "5.2-5.5"
+	]
+# end of adaption from Gitleaks's config example (as of v3.3.0) from the following:
+
+[Global]
+    file = '''(?i)(id_rsa|passwd|id_rsa.pub|pgpass|pem|key|shadow)'''
+
 [whitelist]
-files = [
-  "(.*?)(jpg|gif|doc|pdf|bin|svg|socket)$"
-]
+	description = "image whitelists"
+	file = '''(.*?)(jpg|gif|doc|pdf|bin|svg|socket)$'''