Add a gitleaks rule to find hex strings in URLs

but allow things that look like Github SHAs.
2025-12-17 13:40:07 -05:00
parent 605f4ed2a4
commit 75ef9bfd64
1 changed files with 8 additions and 0 deletions
@@ -9,3 +9,11 @@ paths = [
  '''docs/''',
  '''test/''',
 ]
+
+[[rules]]
+id = "basecamp-integration-url"
+description = "Basecamp Integration URL"
+regex = '''https://[^\s]*?([0-9a-fA-F]{16,})'''
+[rules.allowlist]
+regexTarget = "match"
+regexes = ['''github\.com''']