-
Notifications
You must be signed in to change notification settings - Fork 57
Expand file tree
/
Copy path.detect-secrets.cfg
More file actions
51 lines (47 loc) · 1.15 KB
/
Copy path.detect-secrets.cfg
File metadata and controls
51 lines (47 loc) · 1.15 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
# detect-secrets configuration
# https://github.com/Yelp/detect-secrets
[detect-secrets]
version = 1.4.0
# Plugins to use for scanning
plugins_used:
- name: AWSKeyDetector
- name: AzureStorageKeyDetector
- name: BasicAuthDetector
- name: CloudantDetector
- name: DiscordBotTokenDetector
- name: GitHubTokenDetector
# detect-secrets v1.4.x uses separate high-entropy plugins for base64/hex
- name: Base64HighEntropyString
limit: 4.5
- name: HexHighEntropyString
limit: 3.0
- name: IbmCloudIamDetector
- name: IbmCosHmacDetector
- name: JwtTokenDetector
- name: MailchimpDetector
- name: NpmDetector
- name: PrivateKeyDetector
- name: SendGridDetector
- name: SlackDetector
- name: SoftlayerDetector
- name: SquareOAuthDetector
- name: StripeDetector
- name: TwilioKeyDetector
# Exclude patterns
exclude_lines:
- "^\\s*#"
- "example.com"
- "your-api-key"
- "<token>"
- "(?i)<your.*>"
- "sk-xxx"
# Exclude files
exclude_files:
- ".*\\.secrets\\.baseline$"
- ".*\\.lock$"
- ".*\\.min\\.js$"
- ".*\\.(png|jpg|gif|ico|svg|woff2?)$"
- "^REFERENCE/"
- "^tests/"
- "^web/tests/"
- "^tests/fixtures/"