forked from hadenlabs/terraform-aws-openvpn
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
refactor: configuration codespell, gitleaks and todocheck (hadenlabs#23)
- Loading branch information
Showing
4 changed files
with
229 additions
and
36 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,2 @@ | ||
|
|
||
| cas |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,183 @@ | ||
| title = "gitleaks config" | ||
|
|
||
| [[rules]] | ||
| description = "AWS Access Key" | ||
| regex = '''(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}''' | ||
| tags = ["key", "AWS"] | ||
|
|
||
| [[rules]] | ||
| description = "AWS cred file info" | ||
| regex = '''(?i)(aws_access_key_id|aws_secret_access_key)(.{0,20})?=.[0-9a-zA-Z\/+]{20,40}''' | ||
| tags = ["AWS"] | ||
|
|
||
| [[rules]] | ||
| description = "AWS Secret Key" | ||
| regex = '''(?i)aws(.{0,20})?(?-i)['\"][0-9a-zA-Z\/+]{40}['\"]''' | ||
| tags = ["key", "AWS"] | ||
|
|
||
| [[rules]] | ||
| description = "AWS MWS key" | ||
| regex = '''amzn\.mws\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}''' | ||
| tags = ["key", "AWS", "MWS"] | ||
|
|
||
| [[rules]] | ||
| description = "Twitter Secret Key" | ||
| regex = '''(?i)twitter(.{0,20})?['\"][0-9a-z]{35,44}['\"]''' | ||
| tags = ["key", "Twitter"] | ||
|
|
||
| [[rules]] | ||
| description = "Twitter Client ID" | ||
|
|
||
| regex = '''(?i)twitter(.{0,20})?['\"][0-9a-z]{18,25}['\"]''' | ||
| tags = ["client", "Twitter"] | ||
|
|
||
| [[rules]] | ||
| description = "Github" | ||
| regex = '''(?i)github(.{0,20})?(?-i)['\"][0-9a-zA-Z]{35,40}['\"]''' | ||
| tags = ["key", "Github"] | ||
|
|
||
| [[rules]] | ||
| description = "LinkedIn Client ID" | ||
| regex = '''(?i)linkedin(.{0,20})?(?-i)['\"][0-9a-z]{12}['\"]''' | ||
| tags = ["client", "LinkedIn"] | ||
|
|
||
| [[rules]] | ||
| description = "LinkedIn Secret Key" | ||
| regex = '''(?i)linkedin(.{0,20})?['\"][0-9a-z]{16}['\"]''' | ||
| tags = ["secret", "LinkedIn"] | ||
|
|
||
| [[rules]] | ||
| description = "Slack" | ||
| regex = '''xox[baprs]-([0-9a-zA-Z]{10,48})?''' | ||
| tags = ["key", "Slack"] | ||
|
|
||
| [[rules]] | ||
| description = "EC" | ||
| regex = '''-----BEGIN EC PRIVATE KEY-----''' | ||
| tags = ["key", "EC"] | ||
|
|
||
| [[rules]] | ||
| description = "Google API key" | ||
| regex = '''AIza[0-9A-Za-z\\-_]{35}''' | ||
| tags = ["key", "Google"] | ||
|
|
||
| [[rules]] | ||
| description = "Heroku API key" | ||
| regex = '''(?i)heroku(.{0,20})?['"][0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}['"]''' | ||
| tags = ["key", "Heroku"] | ||
|
|
||
| [[rules]] | ||
| description = "MailChimp API key" | ||
| regex = '''(?i)(mailchimp|mc)(.{0,20})?['"][0-9a-f]{32}-us[0-9]{1,2}['"]''' | ||
| tags = ["key", "Mailchimp"] | ||
|
|
||
| [[rules]] | ||
| description = "Mailgun API key" | ||
| regex = '''(?i)(mailgun|mg)(.{0,20})?['"][0-9a-z]{32}['"]''' | ||
| tags = ["key", "Mailgun"] | ||
|
|
||
| [[rules]] | ||
| description = "PayPal Braintree access token" | ||
| regex = '''access_token\$production\$[0-9a-z]{16}\$[0-9a-f]{32}''' | ||
| tags = ["key", "Paypal"] | ||
|
|
||
| [[rules]] | ||
| description = "Picatic API key" | ||
| regex = '''sk_live_[0-9a-z]{32}''' | ||
| tags = ["key", "Picatic"] | ||
|
|
||
| [[rules]] | ||
| description = "Slack Webhook" | ||
| regex = '''https://hooks.slack.com/services/T[a-zA-Z0-9_]{8}/B[a-zA-Z0-9_]{8}/[a-zA-Z0-9_]{24}''' | ||
| tags = ["key", "slack"] | ||
|
|
||
| [[rules]] | ||
| description = "Stripe API key" | ||
| regex = '''(?i)stripe(.{0,20})?['\"'][sk|rk]_live_[0-9a-zA-Z]{24}''' | ||
| tags = ["key", "Stripe"] | ||
|
|
||
| [[rules]] | ||
| description = "Square access token" | ||
| regex = '''sq0atp-[0-9A-Za-z\-_]{22}''' | ||
| tags = ["key", "square"] | ||
|
|
||
| [[rules]] | ||
| description = "Square OAuth secret" | ||
| regex = '''sq0csp-[0-9A-Za-z\\-_]{43}''' | ||
| tags = ["key", "square"] | ||
|
|
||
| [[rules]] | ||
| description = "Twilio API key" | ||
| regex = '''(?i)twilio(.{0,20})?['\"][0-9a-f]{32}['\"]''' | ||
| tags = ["key", "twilio"] | ||
|
|
||
| [[rules]] | ||
| description = "Env Var" | ||
| regex = '''(?i)(apikey|secret|key|api|password|pass|pw|host)=[0-9a-zA-Z-_.{}]{4,120}''' | ||
| tags = ["env"] | ||
|
|
||
| [[rules]] | ||
| description = "Email" | ||
| regex = '''[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,4}''' | ||
| tags = ["email"] | ||
| [rules.allowlist] | ||
| description = "ignore emails" | ||
| regexes = [ | ||
| '''[a-zA-Z0-9._%+-]+@users.noreply.github.com''', | ||
| '''git@github.com''', | ||
| '''git@gitlab.com''', | ||
| '''slovacus@gmail.com''', | ||
| '''hola@hadenlabs.com''', | ||
| '''support@hadenlbas.com''', | ||
| '''support@hadenlabs.com''', | ||
| ] | ||
|
|
||
| [[rules]] | ||
| description = "High Entropy" | ||
| regex = '''[0-9a-zA-Z-_!{}/=]{4,120}''' | ||
| file = '''(?i)(dump.sql|high-entropy-misc.txt)$''' | ||
| tags = ["entropy"] | ||
| [[rules.Entropies]] | ||
| Min = "4.3" | ||
| Max = "7.0" | ||
| [rules.allowlist] | ||
| description = "ignore some" | ||
| files = ['''(.*pub|env)$'''] | ||
| paths = ['''(security.*)'''] | ||
|
|
||
| [[rules]] | ||
| description = "Potential bash var" | ||
| regex='''(?i)(=)([0-9a-zA-Z-_!{}=]{4,120})''' | ||
| tags = ["key", "bash", "API", "generic"] | ||
| [[rules.Entropies]] | ||
| Min = "3.5" | ||
| Max = "4.5" | ||
| Group = "1" | ||
|
|
||
| [[rules]] | ||
| description = "WP-Config" | ||
| regex='''define(.{0,20})?(DB_CHARSET|NONCE_SALT|LOGGED_IN_SALT|AUTH_SALT|NONCE_KEY|DB_HOST|DB_PASSWORD|AUTH_KEY|SECURE_AUTH_KEY|LOGGED_IN_KEY|DB_NAME|DB_USER)(.{0,20})?['|"'].{10,120}['|"']''' | ||
| tags = ["key", "API", "generic"] | ||
|
|
||
| [[rules]] | ||
| description = "Files with keys and credentials" | ||
| file = '''(?i)(id_rsa|passwd|id_rsa.pub|pgpass|pem|ppk)''' | ||
| tags = ["key", "credentials"] | ||
|
|
||
| # Global allowlist | ||
| [allowlist] | ||
| description = "files allowlists" | ||
| files = [ | ||
| '''(.*?)(jpg|gif|doc|pdf|bin)$''', | ||
| '''^\.gitignore$''', | ||
| '''^\.gitleaks.toml$''', | ||
| '''^yarn.lock$''', | ||
| ] | ||
|
|
||
| [whitelist] | ||
| description = "Ignore gitleaks config" | ||
| files = [ | ||
| '''^\.gitleaks.toml$''', | ||
| '''^\.gitignore$''', | ||
| '''^yarn.lock$''', | ||
| ] |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,9 @@ | ||
| origin: github.com/hadenlabs/terraform-aws-openvpn | ||
| issue_tracker: GITHUB | ||
| auth: | ||
| type: none | ||
| ignored: | ||
| - vendor/ | ||
| - node_modules/ | ||
| custom_todos: | ||
| - '@fix' |